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Get Startea 


Cloud Agent API 


The Gualys Cloud Agent API supports managing cloud agents, activation keys 
and configuration profiles for agents. This API is an extension of the Qualys 
Asset Management 8 Tagging API. 


Modules supported 

CA 

Authentication 

Authentication to your Aualys account with valid Gualys credentials is 


reguired for making Aualys API reguests to the Gualys API servers. Learn 
more about authentication to your Gualys account 


Get API Notifications 


We recommend you join our Community and subscribe to our API 
Notifications RSS Feeds for announcements and discussions. 


https://community.qualys.com/community/developer/notifications-api 


About Qualys 


Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of cloud- 
based security and compliance solutions. The Qualys Cloud Platform and its 
integrated Cloud Apps deliver businesses critical security intelligence 
continuously, enabling them to automate the full soectrum of auditing, 
compliance and protection for IT systems and web applications on premises, 
on endpoints and elastic clouds. For more information, please visit 
www.qualys.com 


Qualys and the Qualys logo are proprietary trademarks of Qualys, Inc. All 
other products or names may be trademarks of their respective companies 
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Qualys user account 


The application must authenticate using Qualys account credentials (user 
name and password) as part of the HTTP reguest. The credentials are 
transmitted using the “Basic Authentication Scheme" over HTTPS. 


For more information, see the “Basic Authentication Scheme" section of RFC 
#2617: 


http://www.fags.org/rfcs/rfc2617.html 


The exact method of implementing authentication will vary according to 
which programming language is used. 


Basic authentication - recommended option: 


curl -u "USERNAME:PASSWORD" 
https://gualysapi.gualys.com/gps/rest/1.0/download/cm/alert 


where gualysapi.gualys.com is the base URL to the Gualys API server where 
your account is located. 
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URL to Gualys API server 


Qualys maintains multiple Qualys Cloud Platforms. The API server URL that 
you should use for API reguests depends on the platform where your Gualys 
account is located. 


Account API server URL 

location 

Qualys US https://gualysapi.gualys.com 

Platform 1 

Qualys US https://gualysapi.gg2.apps.gualys.com 
Platform 2 

Qualys US https://qualysapi.qg3.apps.qualys.com 
Platform 3 

Qualys EU https://qualysapi.qualys.eu 

Platform 1 

Qualys EU https://qualysapi.qg2.apps.qualys.eu 
Platform 2 

Qualys India https://gualysapi.gg1.apps.gualys.in 
Platform 1 

Qualys Private https://gualysapi.<customer base url> 


Cloud Platform 


Looking for your API server URL for your account? You can find this easily. 
Just log in to your Qualys account and go to Help > About. You'll see this 
information under Security Operations Center (SOC). 


About 
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fa x 


Launch Help 


Identified Services > 


Identified OS 


Additional References 


Qualys Web Service 
Application Version: 

Online Help Version: 

SCAP Module Version: 
Qualys External Scanners 


Security Operations Center (SOC): 


Scanner Version: 

Vulnerability Signature Version: 
Scanner Services 

Qualys Scanner Appliances 


Security Operations Center (SOC): 


8.9.0.2-2 
8.9.29-1 
1.2 


64.39.96.0/20 (64.39.96.1-64.39.111.254) 
9.0.29-1 

2.3.492-2 

3.0.12-1 


- gualysguard.gualys.com:443 

- dist01.sjdc01.gualys.com:443 

- nochost.sjdc01.gualys.com:443 
- scanservice1.gualys.com:443 

- all in 64.39.96.0/20 
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Making API calls 


Curl samples in our API doc 


We use curl in our API documentation to show an example how to form REST 
API calls, and it is not meant to be an actual production example of 
implementation. 


GET and POST Methods 


Qualys API unctions allow API users to submit parameters (name=value pairs) 
using the GET and/or POST method. There are known limits for the amount of 
data that can be sent using the GET method, and these limits are dependent 
on the toolkit used. Please refer to the individual descriptions of the API 
function calls to learn about the supported methods for each function 


Parameters in URLs 


API parameters, as documented in this user guide, should be specified one 
time for each URL. In the case where the same parameter is specified multiple 
times in a single URL, the last parameter takes effect and the previous 
instances are silently ignored. URL elements are case sensitive. 


Date format in API Results 


The Gualys API has adopted a date/time format to provide consistency and 
interoperability of the Qualys API with third-party applications. The date 
format follows standards published in RFC 3339 and ISO 8601, and applies 
throughout the Gualys API. The date format is: yyyy-mm-ddThh-mm-ssZ This 
represents a UTC value (GMT time zone). 


URL Encoding in API Code 


You must URL encode variables when using the Qualys API. This is standard 
practice for HTTP communications. If your application passes special 
characters, like the single quote (9, parentheses, and symbols, they must be 
URL encoded. For example, the pound (K) character cannot be used as an 
input parameter in URLs. If “#” is specified, the Qualys API returns an error. To 
specify the “#” character in a URL you must enter the encoded value “%23”. 
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The “H" character is considered by browsers and other Internet tools as a 
separator between the URL and the results page, so whatever follows an un- 
encoded “H" character is not passed to the Qualys API server and returns an 
error. 


Making reguests with URL payload 

While it is still possible to create simple API reguests using the GET method, 
you can create API requests using the POST method with an XML payload to 
make an advanced reguest. 

The XML payloads can be compared to a scripting language that allows user 
to make multiple actions within one single API reguest, like adding a 
parameter to an object and updating another parameter. 


The XML structure of the payload is described in the XSD files. 


JSON calls 


Qualys Cloud Agent API does not support JSON requests and responses at 
this time. 
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Pulling specific data from XML response 


An API call can fetch huge amount of data depending on the data (records) 
present in your account for a corresponding API reguest. Instead of getting 
the entire data, if you wish to get only specific elements, you can do so with 
the use of the ?fields= argument in an API reguest. 


The fields argument takes specific element names as input. You can also 
provide nested elements with each element in the XPath separated by a 
dot(.). 


For example, while querying for the manifest version for VM, you can provide 
the argument as follows: 


?fields-agentInfo.manifestVersion.vm 
This corresponds to the XML structure shown below. 


<HostAsset> 
<id>7866685</id> 
<name>ip-172-31-3-82.ap-south-1.compute.internal</name> 
«created»2018-08-01T09:34:44Z«/created» 
«modified»2018-08-10T08:39:49Z«/modified» 


«agentInfo» 


<platform>Linux</platform> 

<activatedModule>AGENT VM</activatedModule> 

<manifestVersion> 
«vm»VULNSIGS-VM-0.12.1.0-17«/vm» 
«pc»VULNSIGS-SCA-0.17.0.0-27«/pc» 


For an example of an API call using the ?fields= argument, see Get manifest 
version for an agent. 
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Supported operators 


These filter operators are supported for use with <ServiceReguest> 
parameters. Keep in mind many API calls support <ServiceReguest> 
parameters, and some API calls do not support <ServiceReguest> parameters. 
Please see the description for each API call for details. 

Integer - EGUALS, NOT EGUALS, GREATER, LESSER, IN 

Text - CONTAINS, EGUALS, NOT EGUALS 

Date - EGUALS, NOT EGUALS, GREATER, LESSER 

Keyword - EGUALS, NOT EGUALS, IN 


Boolean - (true/false) EQUALS, NOT EQUALS 


Important Notes 


1) For a bulk request it is mandatory to add this filter criteria in 
<ServiceReguest>: 


<Criteria field="tagName" operator="EQUALS">Cloud Agent</Criteria> 
2) Use of NOT EGUALS operator is now disabled during agent uninstall 


(Uninstall agents in bulk). This is to avoid unintended conseguences of Tags 
or Assets being deleted or updated. 
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Know your portal version 
/aps/rest/portal/version/ 


[GET] [POST] 


Using the Version API you can find out the installed version of Portal and its 
sub-modules that are available in your subscription. 


Sample XML 


API reguest 


curl -u "USERNAME :PASSWORD" -X "GET" -H "Accept: application/xml" 
https://qualysapi.qualys.com/qps/rest/portal/version 


Response 


<?xml version="1.0" encoding-"UTF-8"?» 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemaLocation="https://qualysapi.qualys.com/qps/xsd/ve 
rsion.xsd"> 
<responseCode>SUCCESS</responseCode> 
<count>1</count> 
<data> 
<Portal-Version> 
<PortalApplication-VERSION>2.33.0.0-SNAPSHOT-1 DEVELOP 
#352 (2018-05-07T22:53:43Z)</PortalApplication-VERSION> 
«WAS - VERSION»6.0.0.0«/WAS-VERSION» 
<FIM-VERSION>1.5.1</FIM-VERSION> 
<VM-VERSION>1.0.3</VM-VERSION> 
<CERTVIEW-VERSION>1.1.0.0</CERTVIEW-VERSION> 
<CM-VERSION>1.20.1</CM-VERSION> 
<MDS-VERSION>2.11.7.0</MDS-VERSION> 
<CA-VERSION>2.9.1.0</CA-VERSION> 
<EDR-VERSION>1.1.0</EDR-VERSION> 
<AV2-VERSION>0.1.0</AV2-VERSION> 
«QUESTIONNAIRE-VERSION»2.14.0.4«/QUESTIONNAIRE -VERSION > 
<WAF - VERSION»2.7.0.0«/WAF - VERSION» 
«/Portal-Version» 
«/data» 
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</ServiceResponse> 


Sample JSON 


API reguest 


curl -u "USERNAME : PASSWORD" -X "GET" -H "Accept: application/json" 
https://gualysapi.gualys.com/gps/rest/portal/version 


Response 
i 
"ServiceResponse": ( 
"data": [ 
i 


"Portal-Version": { 

"PortalApplication-VERSION": "2.33.0.0-SNAPSHOT-1 DEVELOP 
#352 (2018-05-07T22:53:43Z)", 

"WAS-VERSION": "6.0.0.0", 

"VM-VERSION": "1.0.3", 

"CM-VERSION": "1.20.1", 

"MDS-VERSION": "2.11.7.0", 

"CA-VERSION": "2.9.1.0", 

"QUESTIONNAIRE-VERSION": "2.14.0.4", 

"WAF-VERSION": "2.7.0.0" 


Jo 
} 
} 
1, 
"responseCode": "SUCCESS", 
D COUh E 
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Output pagination and truncation 


The XML output of a search API request is paginated and the default page 
size is 100 object records. The page size can be customized to a value 
between 1 and 1,000. If the number of records is greater than the page size 
then the <ServiceResponse> element shows the response code SUCCESS with 
the element <hasMoreRecords>true</hasMoreRecords> as shown below. 


Follow the simple process below to obtain the first two the XML pages for an 
API reguest. Please apply the same logic to get all the next (n+1) pages until 
all records are returned. This is indicated when 
<hasMoreRecords>false</hasMoreRecords>. 


Step 1 - Search alerts and get first batch of results 


Search for assets that have a name containing the string “Windows”. 


API reguest 


curl -u "USERNAME : PASSWORD" -H “content-type: text/xml" -X "POST" -- 
data-binary @- 
"https://qualysapi.qualys.com/qps/rest/2.0/search/am/hostasset" < 
file.xml 

Note: “file.xml” contains the request POST data. 


Reguest POST data 


<ServiceReguest> 
<preferences> 
<limitResults>5</limitResults> 
</preferences> 
<filters> 
<Criteria field="tagName" operator="EQUALS">Cloud Agent 
</Criteria> 
«Criteria field="name"operator="CONTAINS" >Windows 
</Criteria> 
</filters> 
</ServiceRequest> 
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The number of records is greater than the default pagination value so the 
<ServiceResponse> element identifies the last ID of the object in the current 
page output. 


Response 

<ServiceResponse ...> 
<responseCode>SUCCESS</responseCode> 
<COUNT >5</ COUNT > 
<hasMoreRecords>true</hasMoreRecords> 
<lastId>123</lastId> 
<data> 

<!--here you will find 5 asset records--> 

</data> 

</ServiceResponse> 


Step 2 - Search assets and get next batch of results 


To getthe next page of results, you need to edit your service reguest in 
“file.xml” that will be passed to API request as a POST payload. According to 
the element returned in the first page, you want the next page of results to 
start with the object ID 124 or greater. 


API reguest 


curl -u "USERNAME :PASSWORD" -H “content-type: text/xml" -X "POST" -- 
data-binary @- 
"https://qualysapi.qualys.com/qps/rest/2.0/search/am/hostasset" < 
file.xml 

Note: “file.xml” contains the request POST data. 


You'll notice the operator field value is set to 123, which is the value returned 
in <lastld> of the previous page output. The GREATER operator is a logical 
“greater than” (it does not mean greater than or egual to). 


Reguest POST data 


<ServiceReguest> 
<preferences> 
<limitResults>5</limitResults> 
</preferences> 
<filters> 
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<Criteria field="name" operator="CONTAINS">Windows</Criteria> 
«Criteria field="id" operator="GREATER">123</Criteria> 
<Criteria field="tagName" operator="EQUALS">Cloud Agent 
</Criteria> 

</filters> 
</ServiceRequest> 


Set custom page size 


The service request needs to contain the <preferences> section with the 
<limitResults> parameter. For the <limitResults> parameter you can enter a 
value from 1 to 1,000. 


Response 


<ServiceRequest> 
<filters> 
«Criteria» ... </Criteria> 
</filters> 
<preferences> 
<limitResults>200</limitResults> 
</preferences> 
</ServiceRequest> 
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Tracking API usage per user 


You can track API usage per user without the need to provide user credentials 
such as the username and password. Contact Qualys Support to get the X- 
Powered-By HTTP header enabled. Once enabled, the X-Powered-By HTTP 
header is returned for each API reguest made by a user. The X-Powered-By 
value includes a unigue ID generated for each subscription and a unigue ID 
generated for each user. 


Sample - Tracking API usage through the X-Powered-By HTTP 
header 


API reguest 


229HTTP/1.1 200 OK 

X-Powered-By: Qualys:QAPODASJC: f972e2cc-69d6-7ebd-80e6- 
7b9a931475d8:06198167-4313-7591-802a-1c400a0e81b1 

Content-Type: application/xml 

Transfer-Encoding: chunked 

Date: Mon, 84 Dec 2017 05:36:29 GMT 

Server: Apache 
LBDEBUG:NS=10.44.1.12,SERVER=10.44.77.81:50205,CSW=cs-p04-qualysapi 
443 , VSERVER-vs-p04- papi - 80, ACTIVE-SERVICES-2,HEALTH-100 


Once X-Powered-By HTTP header is enabled, information is returned in the 
following format: 


X-Powered-By Gualys:<POD ID>:<SUB UUID>:<USER UUID> 

where, 

POD ID is the shared POD or a PCP. Shared POD is USPOD1, USPOD2, etc. 
SUB UUID is the unigue ID generated for the subscription 


USER UUID is the unique ID generated for the user 


Qualys Cloud Agent API 
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For example: 


X-Powered-By: Qualys:QAPOD45JC:f972e2cc-69d6-7ebd-80€e6- 
7b9a931475d8:06198167-43f3-7591-802a-1c400a0e81b1 


You can use the USER UUID to track API usage per user. 
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Fetch agent binary information 
/aps/rest/1.0/process/ca/binaryinfo/ 


[POST] 


Fetch the agent installer binary information using API. 


Permissions reguired - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access" and Asset Management 
Permission “Read Asset". 


Input Parameters 


Use these parameters to download an installer binary. Depending on the 
availability for your platform, you will be able to download a particular 
installer. 


Parameter Description 


platform={value} (Required) Specify platform type. Valid values are 
WINDOWS, MACOSX, MACOSX M 1, LINUX, AIX, 
LINUX UBUNTU, LINUX PPC 64 LE, BSD, 
SOLARIS X 86, SOLARIS SPARC, and 
LINUXSCOREOS 


If you provide platform value as "ALL" in the 
request body, information of all the available 
binaries for all the platforms will be shown in the 
response. Platform value is case sensitive. 


architecture={value} (Required) Specify platform architecture. Valid 
values are X_86_64, ARM_64, X_64, POWER_5, 
SPARC, and PPC_64_LE 


If you provide architecture value as "ALL" in the 
request body, information of all the available 
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binaries for all the architectures will be shown in 
the response. Architecture value is case sensitive. 


For more information on supported platform and architecture, refer to the 
“Cloud Agent Platform Availability Matrix" section from Cloud Agent Getting 
Started Guide. 


Sample - Fetch binary information for Windows X86 64 


API reguest 


curl -u fo username:password -X POST -H "Content-Type: text/xml" -H 
"X-Requested-With: curl" --data-binary (info binary.xml 
"https://qualysapi.qualys.com/qps/rest/1.0/process/ca/binaryinfo/" 


Request POST data 


<?xml version="1.0" encoding-" UTF-8"?» 
<ServiceReguest> 
<data> 
<BinaryInfo> 
<platform>WINDOWS</platform> 
<architecture>X 86 64</architecture> 
</BinaryInfo> 
</data> 
</ServiceReguest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
«ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance” 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/1. 
0/ca/binaryinfo.xsd"» 
«responseCode»SUCCESS«/responseCode» 
<count>1</count> 
<data> 
<AllBinaryInfo> 
<platforms> 
<Platform> 
<name>Windows</name> 
<version>4.1.0.67</version> 
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<hash>Hash-SHA-256 : 
00fd45af84c28561757d35edee42cb3a8348c2c4008d526f7d57f32c05ad10bc</hash 
> 
<extension>.exe</extension> 
</Platform> 
</platforms> 
«/AllBinaryInfo» 
«/data» 
«/ServiceResponse» 


Sample - Fetch binary information for All platforms/architectures 


API request 


curl -u fo username:password -X POST -H "Content-Type: text/xml" -H 
"X-Requested-With: curl" --data-binary @info_binary. xml 
"https://qualysapi.qualys.com/qps/rest/1.0/process/ca/binaryinfo/" 


Request POST data 


<?xml version="1.0" encoding-" UTF-8"?» 
<ServiceReguest> 
<data> 
<BinaryInfo> 
<platform>ALL</platform> 
<architecture>ALL</architecture> 
</BinaryInfo> 
</data> 
</ServiceReguest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://ww.w3.org/2001/XMLSchema-instance” 
xsi:noNamespaceSchemalocation="https://gualysapi.p81.eng.sjc81.gualys. 
com/qps/xsd/1.0/ca/binaryinfo.xsd"> 
<responseCode>SUCCESS</responseCode> 
<count>12</count> 
<data> 
<AllBinaryInfo> 
<platforms> 
<Platform> 
<name>Windows< /name> 
«version»4.1.0.51«/version» 
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<hash>f5c1947925946be884a62aa5dd5f3ba11c3f5b66c394 
7070b1272927bbbe08cb</hash> 
<extension>.exe</extension> 
</Platform> 
<Platform> 
<name>MACOSX< /name> 
<version>3.7.0.55</version> 
«hash»Hash-SHA-256 : 
15f1db35fe28da613f2acaf295c0e10b2d10fbbcb3030f2097a16f9d827b1511</hash 
> 
<extension>.pkg</extension> 
</Platform> 
<Platform> 
<name>Linux</name> 
<version>4.6.0.56</version> 
«hash»Hash-SHA-256 : 
a3ffe919072e6dd048e429c1f443845e321c1105863087c0d4364eb4587c731b</hash 
> 
<extension>.rpm</extension> 
</Platform> 
<Platform> 
«name»LINUX ARM</name> 
<version>4.7.2.7</version> 
<hash>Hash-SHA-256 : 
f6289bfedb902c8a588cf421c98581a6c412683c0d33b80b5d78429b4cc1722e</hash 
> 
<extension>.rpm</extension> 
</Platform> 
<Platform> 
<name>AIX</name> 
<version>3.10.0.17</version> 
<hash>Hash-SHA-256 : 
386371c4489e6b7fc9302289e5071e9b224fdd952937258deb6e7064991a0f1f</hash 
> 
<extension>.bff.gz</extension> 
</Platform> 
<Platform> 
<name>LINUX UBUNTU</name> 
<version>4.6.0.56</version> 
«hash»Hash-SHA-256 : 
b718956f5c6c5b02ab13bb3a6d4e4874c57f85269b04f8d04aaaebb6d2caf9f8</hash 
> 
<extension>.deb</extension> 
</Platform> 
<Platform> 
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<name>LINUX UBUNTU ARM</name> 
<version>4.7.2.7</version> 
<hash>Hash-SHA-256 : 

57a8ef2d58222242e09c7c6072632aab42e52a9f4a51fa33ed6310c986183a75c</hash 
> 
<extension>.deb</extension> 
</Platform> 
<Platform> 
<name>LINUX_PPC64LE</name> 
<version>2.6.8.28</version> 
«hash»Hash-SHA-256 : 
533f093de6549db60af3f515ca99f1975498b32fd08481b96267d6946be3ffca«/hash 
> 
<extension>.rpm</extension> 
</Platform> 
<Platform> 
<name>BSD</name> 
<version>3.12.0.6</version> 
«hash»Hash-SHA-256 : 
11f8261a36dd6a208a0914f4a15fedc87be4e6f192458331f43f1dfac371f83a«/hash 
> 
<extension>.txz</extension> 
</Platform> 
<Platform> 
<name>SOLARIS X86</name> 
<version>3.11.0.7</version> 
«hash»Hash-SHA-256 : 
e1f8565417a86d17b0a2da500fce9956af188a13661c252f1f02aca7acfOcedf«/hash 
> 
<extension>.pkg</extension> 
</Platform> 
<Platform> 
«name»SOLARIS SPARC</name> 
<version>3.11.0.7</version> 
«hash»Hash-SHA-256 : 
c8394acb7548b0ee8fd808e305d65b713afb7e76ecea19fe94ff6b2adee7f990</hash 
> 
<extension>.pkg</extension> 
</Platform> 
<Platform> 
<name>LINUX_COREOS</name> 
<version>3.5.0.20</version> 
«hash»Hash-SHA-256 : 
f5700ab7f6d3cd1810d3589fb9b64d01007dc771dc8dea66f8be35e9ad9e3fc3e«/hash 
> 
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<extension>.tar.xz</extension> 


</Platform> 
</platforms> 
«/AllBinaryInfo» 
«/data» 
«/ServiceResponse» 


XSD 


«platform API server»/qps/xsd/1.0/ca/binarylInfo.xsd 
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Download agent binaries 
/aps/rest/1.0/download/ca/downloadbinary 


[POST] 


Download the agent installer binaries using API. 


Permissions required - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access” and Asset Management 
Permission “Read Asset”. 


Input Parameters 


Use these parameters to download an installer binary. Depending on the 
availability for your platform, you will be able to download a particular 
installer. 


Parameter Description 


platform={value} (Required) Specify platform type. Valid values are 
WINDOWS, MACOSX, MACOSX_M_1, LINUX, AIX, 
LINUX UBUNTU, LINUX PPC 64 LE, BSD, 
SOLARIS X 86, SOLARIS SPARC, and 
LINUX COREOS 


Platform value is case sensitive. 

architecture={value} (Required) Specify platform architecture. Valid 
values are X 86 64, ARM 64, X 64, POWER 5, 
SPARC, and PPC 64 LE 


Architecture value is case sensitive. 


For more information on supported platform and architecture, refer to the 
“Cloud Agent Platform Availability Matrix" section from Cloud Agent Getting 
Started Guide. 
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This document provides sample reguests and responses to download agent 
binaries using Curl. You can also use our Postman Collections to download 
agent binaries. 


Sample - Download Windows X86 64 installer binary 


API reguest 


curl -u fo username:password -X POST -H "Content-Type: text/xml" -H 
"X-Requested-With: curl" --data-binary (download binary.xml 
"https://qualysapi.qualys.com/qps/rest/1.0/download/ca/downloadbinary/ 
" --remote-name --remote-header-name 


Request POST data 


<?xml version="1.0" encoding-" UTF-8"?» 
<ServiceReguest> 
<data> 
<DownloadBinary> 
<platform>WINDOWS</platform> 
<architecture>X 86 64</architecture> 
</DownloadBinary> 
</data> 
</ServiceReguest> 


Response (Success) 
Installer binary will be downloaded with Status: 208 OK 


Response (Fail) 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="http://gualysapi.gualys.com/portal- 
api/xsd/1.0/ca/downloadbinary.xsd"> 

«responseCode»OTHER ERROR«/responseCode» 

<responseErrorDetails> 

<errorMessage>An error occurred during request processing. Please 
contact your account manager.</errorMessage> 

</responseErrorDetails> 
</ServiceResponse> 
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Agent count 
/aps/rest/2.0/count/am/hostasset 


[POST] 


Get the current number of cloud agents installed (provisioned) in the user’s 
subscription. This count matches the number of agent hosts in the user’s 
scope. 


Permissions required - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access” and Asset Management 
Permission “Read Asset”. 

Input Parameters 

To get a count of agents installed, nothing other than the filter tagName 
EQUALS Cloud Agent is recommended. The more filters added to the request 
will result in a more refined count. 

Use the following <ServiceRequest> parameters to select agents you want to 
include in the agent count. These parameters act as filters. When multiple 
filters are specified, parameters are combined using a logical AND 


Filter operators are available for use with <ServiceRequest> parameters. 


Supported filter operators 


Parameter Description 

id (Long) Asset ID of the agent host. 

name (String) Asset name of the agent host. 

created (Date) Date when the agent host was added to your 


asset inventory (i.e. when the agent was 
provisioned). Date is specified in UTC/GMT format, 
i.e. YYYY-MM-DD[THH:MM:SSZ] 


28 


Qualys Cloud Agent API 
Agents 


updated (Date) Date when the agent was last updated, such as 
activation, host name change, etc. Date is 
specified in UTC/GMT format. 


lastCheckedln (Date) Date when the agent last checked in to the cloud 
platform. Date is specified in UTC/GMT format. 


tagName (String) Asset tag name assigned to the agent host. All 
agent hosts are assigned the tag Cloud Agent. 


Sample - Get cloud agent count 


API reguest 


curl -u fo username:password -X POST -H "Content-Type: text/xml" -H 
"Cache-Control: no-cache" --data-binary (get all agents count.xml 
"https://qualysapi.qualys.com/qps/rest/2.0/count/am/hostasset" 
Note: “file.xml" contains the request POST data. 


Request POST data 


<?xml version="1.0" encoding-" UTF-8" ?> 
<ServiceReguest> 
<filters> 
<Criteria field="tagName" operator="EQUALS">Cloud 
Agent</Criteria> 
</filters> 
</ServiceReguest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2081/XMLSchema-instance”" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/2. 
0/am/hostasset.xsd"» 

«responseCode»SUCCESS«/responseCode» 

<count>3</count> 
</ServiceResponse> 


XSD 


<platform API server>/aps/xsd/2.0/am/hostasset.xsd 
29 
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List agents 
/aps/rest/2.0/search/am/hostasset 


[POST] 


List cloud agents in the user's account. 


Filter criteria required - To obtain a list of agent assets, it is mandatory to add 
this filter criteria in <ServiceReguest>: 


<Criteria field="tagName" operator="EQUALS">Cloud Agent</Criteria> 


Pagination - A maximum of 100 agent assets are returned by default. To 
customize this specify a “preferences” tag in the POST body of your request. 
Learn more about pagination 


Limit your results - Use the optional “fields” parameter to limit the amount of 
information returned. Learn more about limiting your results 


Permissions required - Managers with full scope. Other users must have 
requested asset in their scope and these permissions: Access Permission “API 
Access” and Asset Management Permission “Read Asset”. 


Input Parameters 


Supported filter operators 


Parameter Description 
qwebHostld (integer) 
lastVulnScan (date) 
lastComplianceScan (date) 


informationGatheredUpdated (date) 


OS (text) 
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dnsHostName 
address 
vulnsUpdated 

id 

name 

created 

type 

netbiosName 
netbiosNetworkID 
networdGuid 


trackingMethod 


port 

installedSoftware 
tagName 

tagld 

update 

Assets with cloud agents 
activationKey 


agentConfigurationName 
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(text) 
(text) 
(date) 
(integer) 
(text) 
(date) 
(text) 
(string) 
(text) 
(text) 


(keyword) NONE, IP, DNSNAME, 
NETBIOS, INSTANCE ID, QAGENT 


(integer) 
(text) 
(text) 
(integer) 


(date) 


(string) Allowed operator: EGUALS 


(string) Allowed operators: EGUALS, 
CONTAINS 
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agentConfigurationld (long) Allowed operator: EAUALS 
agentVersion (string) Allowed operators: EGUALS, 

LESSER, GREATER 
lastCheckedln (date) Allowed operators: EGUALS, 
LESSER, GREATER 
Sample - List agents 
API reguest 
curl -u "USERNAME :PASSWORD" -X "POST" -H "Content-Type: text/xml" -H 
"Cache-Control: no-cache" --data-binary (list all agents.xml 


"https://qualysapi.qualys.com/qps/rest/2.0/search/am/hostasset/" 
Note: “file.xml" contains the request POST data. 


Request POST data 


<ServiceReguest> 
<filters> 
<Criteria field="tagName" operator="EQUALS">Cloud 
Agent</Criteria> 
</filters> 
</ServiceReguest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/2. 
0/am/hostasset.xsd"» 
«responseCode»SUCCESS«/responseCode» 
<count>2</count> 
<hasMoreRecords>false</hasMoreRecords> 
<data> 
<HostAsset> 
<id>611872</id> 
<name>113080-T4</name> 
«created»2017-01-12T05:59:47Z«/created» 
«modified»2017-05-04T18:41:59Z«/modified» 
<type>HOST</type> 
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<tags> 
<list> 
<TagSimple> 
<id>8572212</id> 
<name>mytag</name> 
</TagSimple> 
<TagSimple> 
<id>7584632</id> 
<name>Cloud Agent</name> 
</TagSimple> 
<TagSimple> 
<id>7730634</id> 
<name>ga</name> 
</TagSimple> 
</List> 
</tags> 
«sourceInfo» 
<list> 
<AssetSource/> 
SPESE 
«/sourceInfo» 
<gwebHostId>90289</gwebHostId> 
<lastComplianceScan>2017-01- 
13786:41:34Z</lastComplianceScan> 
<lastSystemBoot>2017-01-13T14:38:09Z</lastSystemBoot> 
<lastLoggedOnUser >CORPYrkumar</lastLoggedOnUser > 
<OS>WINDOWS 95 11</os> 
<dnsHostName>113080-t450</dnsHostName> 
<agentInfo> 
<agentVersion>1.5.5.101</agentVersion> 
<agentId>25fdbafc -4b9d-403b-962c -601bac5a6b69< /agentId> 
<status>STATUS INACTIVE</status> 
<lastCheckedIn>2017-01-13T19:18:07Z</lastCheckedIn> 
<connectedFrom>64.39.96.133</connectedFrom> 
<location>Sunnyvale,California United 
States</location> 
<locationGeoLatitude>37.3537</locationGeoLatitude> 
<locationGeoLongtitude>- 
122.0307</locationGeoLongtitude> 
<chirpStatus>Manifest Downloaded</chirpStatus> 
<platform>Windows</platform> 
<activatedModule>AGENT VM«/activatedModule» 
<manifestVersion>VULNSIGS-VM-2.3.493- 
4</manifestVersion> 
<agentConfiguration> 
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<id>203801</id> 
<name>Config Created using api-isdefault 
one149245571382344323</name> 
</agentConfiguration> 
<activationKey> 
<activationId>dcfab7e9-38c2-4301-8da1- 
d3ecab9555d5</activationId> 
<title>1480630093818 key by api count limited to 
unlimited vm/pv active</title> 
</activationKey> 
</agentInfo> 
<netbiosName>113080-T450</netbiosName> 


XSD 


<platform API server>/aps/xsd/2.0/am/hostasset.xsd 
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Activate a single agent 
/aps/rest/2.0/activate/am/asset/<id>?module=<value1>,<value2> 


[POST] 


Activate a single cloud agent for one or more modules (i.e. VM, PC, FIM, EDR, 
SCA). 


Where “id” (Required) is the asset ID of the agent you want to activate. This is 
the agent ID where the agent is installed. 


“module” (Required) is the module to be activated for the agent: AGENT VM 
(for VM module), AGENT PC (for PC module), AGENT. FIM (for FIM module), 
AGENT. EDR (for EDR module) or AGENT SCA (for SCA module). Specified 
module must be enabled in the user's subscription. You can specify more than 
one module separated by a comma. For example, 

module=AGENT VM,AGENT PC,AGENT FIMAGENT EDR,AGENT SCA. 


Note: AGENT PC and AGENT SCA cannot be activated at the same time as 
SCA is a subset of PC. 


Permissions reguired - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access” and CA Agent Permission 
“Activate Agent”. 


Input Parameters 


There are no input parameters. 


Sample - Activate single agent for VM module 


API reguest 


curl -u fo username:password -X POST -H "Content-Type: text/xml" -H 
"X-Reguested-With: curl" --data-binary (single activation.xml 
"https://gualysapi.gualys.com/gps/rest/2.0/activate/am/asset/5808297?m 
odule=AGENT VM" 

Note: “file.xml” contains the request POST data. 
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Contents of single activation.xml 


<?xml version="1.0" encoding-" UTF-8" ?» <ServiceReguest> 
</ServiceReguest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://ww.w3.org/2001/XMLSchema-instance” 
xsi:noNamespaceSchemaLocation="https://qualysapi.qualys.com/qps/xsd/2. 
8/am/asset.xsd" > 
<responseCode >SUCCESS</responseCode> 
<count>1</count> 
<data> 
<Asset> 
<id>5808297</id> 
«name»qubu1404spp4« /name» 
<created>2018-06-22T11:45:38Z</created> 
<modified>2018-07-21T21:14:26Z</modified> 
<type>HOST</type> 
<tags> 
<list> 
<TagSimple> 
<id>1835835</id> 
<name>Tag name 1</name> 
</TagSimple> 
<TagSimple> 
<id>2327817</id> 
<name>Tag name 2</name> 
</TagSimple> 
<TagSimple> 
<id>1828415</id> 
<name>Cloud Agent</name> 
</TagSimple> 
<TagSimple> 
<id>2079439</id> 
<name>Tag name 3</name> 
</TagSimple> 
<TagSimple> 
<id>1855817</id> 
<name>Tag name 4</name> 
</TagSimple> 
st > 
</tags> 
«sourceInfo» 
est 
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<AssetSource/> 
</list> 
</sourceInfo> 
</Asset> 
</data> 
</ServiceResponse> 


XSD 


<platform API server>/aps/xsd/2.0/am/asset.xsd 
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Activate agents in bulk 
/aps/rest/2.0/activate/am/asset?module=<valuel>,<value2> 


[POST] 


Bulk activates cloud agents for one or more modules (i.e. VM, PC, FIM, EDR, 
SCA). 


Where “module” (Required) is the module to be activated for the agent: 
AGENT_VM (for VM module), AGENT_PC (for PC module), AGENT FIM (for 
FIM module), AGENT. EDR (for EDR module) or AGENT. SCA (for SCA 
module). Specified module must be enabled in the user's subscription. You 
can specify more than one module separated by a comma. For example, 
module=AGENT VM,AGENT PC,AGENT FIM AGENT. EDR,AGENT SCA. 


Note: AGENT PC and AGENT SCA cannot be activated at the same time as 
SCA is a subset of PC. 


Filter criteria reguired - For a bulk reguest it is mandatory to add this filter 
criteria in <ServiceReguest>: 


<Criteria field="tagName" operator="EGUALS">Cloud Agent</Criteria> 
Permissions reguired - Managers with full scope. Other users must have these 


permissions: Access Permission “API Access” and CA Agent Permission 
“Activate Agent”. 


Input Parameters 

To activate all agents installed, nothing other than the filter tag Name EQUALS 
Cloud Agent is recommended. The more filters added to the reguest we'll 
activate a more refined list of agents. 

Use the following <ServiceReguest> parameters to select agents you want to 
activate. These parameters act as filters. When multiple filters are specified, 
parameters are combined using a logical AND. 


Filter operators are available for use with <ServiceReguest> parameters. 


Supported filter operators 
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Parameter Description 
id (Long) Asset ID of the agent host. 
name (String) Asset name of the agent host. 
created (Date) Date when the agent host was added to your asset 


inventory (i.e. when the agent was provisioned). Date 
is specified in UTC/GMT format, i.e. YYYY-MM- 
DD[THH:MM:SSZ] 


updated (Date) Date when the agent was last updated, such as 
activation, host name change, etc. Date is specified in 
UTC/GMT format. 


tagName Asset tag name assigned to the agent host. All agent 
(String) hosts are assigned the tag Cloud Agent. 


Sample - Bulk activate agents for VM, FIM 


API request 


curl -u fo username:password -X POST -H "Content-Type: text/xml" -H 
"Cache-Control: no-cache" --data-binary @activate all agents.xml 
"https://qualysapi.qualys.com/qps/rest/2.0/activate/am/asset?module-AG 
ENT VM,AGENT FIM" 

Note: “file.xml" contains the request POST data. 


Contents of activate all agents.xml 


<?xml version="1.0" encoding-" UTF-8" ?> 
<ServiceReguest> 
<filters> 
<Criteria field="tagName" operator="EQUALS">Cloud 
Agent</Criteria> 
</filters> 
</ServiceRequest> 


Response 
<?xml version="1.0" encoding-" UTF-8"?» 
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<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/2. 
0/am/asset.xsd"» 

«responseCode»SUCCESS«/responseCode» 
<count>3</count> 
<data> 
<Asset> 
<id>712038</id> 
<name>192.168.1.12</name> 
<created>2014-06-18T16:54:50Z</created> 
<modified>2014-06-18T16:54:51Z</modified> 
<type>HOST</type> 
<tags> 
<list> 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
</list> 
</tags> 
«sourceInfo» 
«list» 
<AssetSource/> 
</list> 
</sourceInfo> 
</Asset> 
<Asset> 
<id>2532638</id> 
<name>10.40.2.176</name> 
<created>2015-04-17T13:32:48Z</created> 
<modified>2015-05-14T14:06:03Z</modified> 
<type>HOST</type> 
<tags> 
ELSE 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
</list> 
</tags> 
<sourceInfo> 
<list> 
<AssetSource/> 
</list> 
«/sourceInfo» 
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</Asset> 
<Asset> 
<id>2532838</id> 
<name>local IP agent</name> 
<created>2017-04-19T13:52:08Z</created> 
<modified>2018-02-05T12:26:48Z</modified> 
<type>HOST</type> 
<tags> 
<list> 
<TagSimple> 
Gp SONS Sy Hd” 
<name>Cloud Agent</name> 
</TagSimple> 
<TagSimple> 
<id>217325</id> 
<name>Agent< /name> 
</TagSimple> 
</List> 
</tags> 
«sourceInfo» 
Tis t > 
<AssetSource/ > 
Sis t> 
«/sourceInfo» 
</Asset> 
</data> 
</ServiceResponse> 


XSD 


<platform API server>/aps/xsd/2.0/am/asset.xsd 
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Deactivate a single agent 
/aps/rest/2.0/deactivate/am/asset/<id>?module=<valuel>,<value2> 


[POST] 


Deactivate a single cloud agent for one or more modules (i.e. VM, PC, FIM, 
EDR, SCA) 


Where: 


“id” (Required) is the asset ID of the agent you want to deactivate. This is the 
agent ID where the agent is installed. 


“module” (Required) is the module to be deactivated: AGENT_VM (for VM 
module), AGENT_PC (for PC module), AGENT_FIM (for FIM module), 
AGENT_EDR (for EDR module) or AGENT_SCA (for SCA module). Specified 
module must be enabled in the user's subscription. You can specify more than 
one module separated by a comma. For example, 

module=AGENT VM,AGENT PC,AGENT FIMAGENT EDR,AGENT SCA. 


Permissions reguired - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access” and CA Agent Permission 
“Deactivate Agent". 


Input Parameters 


There are no input parameters. 


Sample - Deactivate single agent for VM module 


API reguest 


curl -u fo username:password -X POST -H "Content-Type: text/xml" -- 
data-binary @single deactivation.xml 
"https://gualysapi.gualys.com/gps/rest/2.0/deactivate/am/asset/5214017 
?module=AGENT VM" 

Note: “file.xml” contains the request POST data. 


Contents of single_deactivation.xml 
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<?xml version="1.0" encoding="UTF-8" ?> <ServiceReguest> 
</ServiceReguest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
«ServiceResponse xmlns:xsi="http://ww.w3.org/2001/XMLSchema-instance” 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/2. 
8/am/asset.xsd" > 
<responseCode>SUCCESS</responseCode> 
<count>1</count> 
<data> 
<Asset> 
<id>5214017</id> 
<name>113080-T450</name> 
<created>2017-04-12T07:23:41Z</created> 
<modified>2017-04-19T07:07:12Z</modified> 
<type>HOST</type> 
<tags> 
lE 
<TagSimple> 
<id>7584632</id> 
<name>Cloud Agent</name> 
</TagSimple> 
</list> 
</tags> 
<sourcelnfo> 
<list> 
<AssetSource/ > 
</lisit> 
«/sourceInfo» 
</Asset> 
</data> 
</ServiceResponse> 
</ServiceResponse> 


XSD 


<platform API server>/aps/xsd/2.0/am/asset.xsd 
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Deactivate agents in bulk 
/aps/rest/2.0/deactivate/am/asset?module=<valuel>,<value2> 


[POST] 


Bulk deactivate cloud agents for one or more modules (i.e. VM, PC, FIM, EDR, 
SCA). 


Where “module” (Required) is the module to be deactivated for the agent: 
AGENT_VM (for VM module), AGENT_PC (for PC module), AGENT FIM (for 
FIM module), AGENT. EDR (for EDR module) or AGENT. SCA (for SCA 
module). Specified module must be enabled in the user's subscription. You 
can specify more than one module separated by a comma. For example, 
module=AGENT VM,AGENT PC,AGENT FIM AGENT. EDR, AGENT SCA. 


Filter criteria reguired - For a bulk reguest it is mandatory to add this filter 
criteria in <ServiceReguest>: 


<Criteria field="tagName" operator="EGUALS">Cloud Agent</Criteria> 
Permissions reguired - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access” and CA Agent Permission 
“Deactivate Agent”. 

Input Parameters 

To deactivate all agents installed, nothing other than the filter tag Name 
EGUALS Cloud Agent is recommended. The more filters added to the reguest 
we'll deactivate a more refined list of agents. 

Use the following <ServiceReguest> parameters to select agents you want to 
deactivate. These parameters act as filters. When multiple filters are specified, 
parameters are combined using a logical AND. 


Filter operators are available for use with <ServiceReguest> parameters. 


Supported filter operators 
Parameter Description 
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id (Long) Asset ID of the agent host. 
name (String) Asset name of the agent host. 
created (Date) Date when the agent host was added to your asset 


inventory (i.e. when the agent was provisioned). Date 
is specified in UTC/GMT format, i.e. YYYY-MM- 
DD[THH:MM:SSZ] 


updated (Date) Date when the agent was last updated, such as 
activation, host name change, etc. Date is specified in 
UTC/GMT format. 


tagName Asset tag name assigned to the agent host. All agent 
(String) hosts are assigned the tag Cloud Agent. 


Sample - Bulk deactivate agents for VM, FIM 


API request 


curl -u fo username:password -X POST -H "Content-Type: text/xml" -H 
"Cache-Control: no-cache" --data-binary @deactivate all agents.xml 
"https://qualysapi.qualys.com/qps/rest/2.0/deactivate/am/asset?module- 
AGENT VM,AGENT FIM" 

Note: “file.xml" contains the request POST data. 


Contents of deactivate all agents.xml 


<?xml version="1.0" encoding="UTF-8" ?> 
<ServiceReguest> 
<filters> 
<Criteria field="tagName" operator="EQUALS">Cloud 
Agent</Criteria> 
</filters> 
</ServiceRequest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 

«ServiceResponse xmlns:xsi="http://ww.w3.org/2001/XMLSchema-instance” 
xSi:noNamespaceSchemaLocation="https://qualysapi.qualys.com/qps/xsd/2. 
8/am/asset.xsd" > 
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<responseCode>SUCCESS</responseCode> 
<count>3</count> 
<data> 

<Asset> 
<id>712038</id> 
<name>192.168.1.12</name> 
<created>2018-06-18T16:54:50Z</created> 
<modified>2018-06-18T16:54:51Z</modified> 
<type>HOST</type> 
<tags> 
ISES 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
< St 
</tags> 
<sourceInfo> 
«ust 
<AssetSource/> 
</W1st> 
«/sourceInfo» 
</Asset> 
<Asset> 
<id>2532638</id> 
«name»10.40.2.176«/name» 
<created>2018-04-17T13:32:48Z</created> 
<modified>2018-05-14T14:06:03Z</modified> 
<type>HOST</type> 
<tags> 
<list> 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
Mb 
</tags> 
<sourceInfo> 
est 
<AssetSource/> 
< MS 
</sourceInfo> 
</Asset> 
<Asset> 
<id>2532838</id> 
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<name>local IP agent</name> 
<created>2017-04-19T13:52:08Z</created> 
<modified>2018-02-05T12:26:48Z</modified> 
<type>HOST</type> 
<tags> 

<list> 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
<TagSimple> 
<id>217325</id> 
<name>Agent</name> 
</TagSimple> 
</List> 
</tags> 
«sourceInfo» 
<list> 
<AssetSource/> 
</Tist> 
«/sourceInfo» 
</Asset> 
</data> 
</ServiceResponse> 


XSD 


<platform API server>/aps/xsd/2.0/am/asset.xsd 
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Uninstall a single agent 
/aps/rest/2.0/uninstall/am/asset/<id> 


[POST] 


Uninstall a single cloud agent and remove the associated agent host from 
your subscription. 


Where “id” (Required) is the asset ID of the agent you want to uninstall. This 
is the asset ID where the agent is installed. 


Good to Know - A request to uninstall an agent makes a call to the Qualys 
Cloud Platform to purge the host scan data (findings) for the agent host and 
remove the agent host from your subscription. 


Permissions required - Managers with full scope. Other users must have these 


permissions: Access Permission “API Access” and CA Agent Permission 
“Uninstall Agent”. 


Input Parameters 


There are no input parameters. 


Sample - Uninstall single agent 


API request 


curl -u fo_username:password -X POST -H "Content-Type: text/xml" -- 
data-binary @single uninstall.xml 
"https://qualysapi.qualys.com/qps/rest/2.0/uninstall/am/asset/1113679" 


Contents of single uninstall.xml 


<?xml version="1.0" encoding-" UTF-8" ?» <ServiceRequest> 
</ServiceReguest> 


Response 
<?xml version="1.0" encoding="UTF-8"?> 
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<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/2. 
8/am/asset.xsd" > 

<responseCode>SUCCESS</responseCode> 
<count>1</count> 
<data> 

<Asset> 
<id>1113679</id> 
<name>113080-T450</name> 
<created>2018-03-09T02:24:53Z</created> 
<modified>2018-03-09T02:24:54Z</modified> 


<type>HOST</type> 
<tags> 
<list> 
<TagSimple> 
<id>7563812</id> 
<name>Cloud Agent</name> 
</TagSimple> 
</list> 
</tags> 
</Asset> 
</data> 
</ServiceResponse> 
XSD 


<platform API server>/aps/xsd/2.0/am/asset.xsd 
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Uninstall agents in bulk 
/aps/rest/2.0/uninstall/am/asset 


[POST] 


Bulk uninstall cloud agents matching the specified filter criteria, and remove 
associated agent hosts from your subscription. 


Filter criteria required - For a bulk request it is mandatory to add this filter 
criteria in <ServiceRequest>: 


<Criteria field="tagName" operator="EQUALS">Cloud Agent</Criteria> 


Note: Proving at least one criteria in Service Request is mandatory for bulk 
uninstallation of agents. 


Good to Know - A request to uninstall agents makes a call to the Qualys 
Cloud Platform to purge the host scan data (findings) for the agent hosts and 
remove the agent hosts from your subscription 


Permissions required - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access” and CA Agent Permission 
“Uninstall Agent”. 


Input Parameters 


To uninstall all agents, nothing other than the filter tagName EQUALS Cloud 
Agent is recommended. The more filters added to the request we'll uninstall a 
more refined list of agents. 


Use the following <ServiceRequest> parameters to select agents you want to 
uninstall. These parameters act as filters. When multiple filters are specified, 
parameters are combined using a logical AND. 


Filter operators are available for use with <ServiceRequest> parameters. 
Use of NOT EQUALS operator is now disabled during agent uninstall. This is 
to avoid unintended consequences of Tags or Assets being deleted or 


updated. The service response includes an error message if you use the NOT 
EQUALS operator while uninstalling an agent. 
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Supported filter operators 
Parameter Description 
id (Long) Asset ID of the agent host. 
name (String) Asset name of the agent host. 
created (Date) Date when the agent host was added to your asset 


inventory (i.e. when the agent was provisioned). Date 
is specified in UTC/GMT format, i.e. YYYY-MM- 
DD[THH:MM:SSZ] 


updated (Date) Date when the agent was last updated, such as 
activation, host name change, etc. Date is specified in 
UTC/GMT format. 


tagName Asset tag name assigned to the agent host. All agent 
(String) hosts are assigned the tag Cloud Agent. 

agentUuid Agent ID (UUID) of the Agent host. 

(String) 


Sample - Uninstall agents in bulk 


API reguest 
curl -u fo username:password -X POST -H "Content-Type: text/xml" -H 
"Cache-Control: no-cache" --data-binary @uninstall all agents.xml 


"http://qualysapi.qualys.com/qps/rest/2.0/uninstall/am/asset/" 


Contents of uninstall all agents.xml 


<?xml version="1.0" encoding-" UTF-8" ?> 
<ServiceReguest> 
<filters> 
<Criteria field="tagName" operator="EQUALS">Cloud 
Agent</Criteria> 
</filters> 
</ServiceRequest> 
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Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/2. 
0/am/asset.xsd"» 
«responseCode»SUCCESS«/responseCode» 
<count>3</count> 
<data> 
<Asset> 
<id>712038</id> 
<name>192.168.1.12</name> 
<created>2014-06-18T16:54:50Z</created> 
<modified>2014-06-18T16:54:51Z</modified> 
<type>HOST</type> 
<tags> 
<list> 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
sist) 
</tags> 
«sourceInfo» 
<list> 
<AssetSource/> 
</list> 
«/sourceInfo» 
</Asset> 
<Asset> 
<id>2532638</id> 
<name>10.40.2.176</name> 
<created>2017-04-17T13:32:48Z</created> 
<modified>2017-05-14T14:06:03Z</modified> 
<type>HOST</type> 
<tags> 
<list> 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
</list> 
</tags> 
«sourceInfo» 
ES E> 
<AssetSource/> 
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er mets 
«/sourceInfo» 
</Asset> 
<Asset> 
<id>2532838</id> 
<name>local IP agent</name> 
<created>2018-04-19T13:52:08Z</created> 
<modified>2018-02-05T12:26:48Z</modified> 
<type>HOST</type> 
<tags> 
cst 
«TagSimple» 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
<TagSimple> 
<1d>217325</1d> 
<name>Agent</name> 
</TagSimple> 
</list> 
</tags> 
<sourceInfo> 
<list> 
<AssetSource/> 
</list> 
</sourceInfo> 
</Asset> 
</data> 
</ServiceResponse> 


In case of agent UUID, use the EQUALS operator for uninstalling a single 
agent or use the IN operator with comma separated UUID values for bulk 
uninstall. 


Sample API Request 

curl -u fo username:password -X POST -H "Content-Type: text/xml" -H 
"Cache-Control: no-cache" --data-binary @uninstall all agents.xml 
"http://qualysapi.qualys.com/qps/rest/2.0/uninstall/am/asset/" 
Note: “file.xml" contains the request POST data. 


Request POST data: (Contents of file.xml) 
<?xml version="1.0" encoding-"UTF-8" ?» 
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<ServiceReguest> 
<filters> 
«Criteria field="agentUuid" operator="IN">1d71c@7e-f1b0-42df- 
918b-01b231489b86,0285fead-0014-465e-8840-6457ad482bb3</Criteria> 
</filters> 
</ServiceRequest> 


Note: Use the EQUALS operator for uninstalling a single agent or use 
the IN operator with comma separated UUID values for bulk uninstall. 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/2. 
0/am/asset.xsd"» 
<responseCode>SUCCESS</responseCode> 
<count>2</count> 
<data> 
<Asset> 
<id>712038</id> 
<name>192.168.1.12</name> 
<created>2017-06-18T16:54:50Z</created> 
<modified>2018-04-18T16:54:51Z</modified> 
<type>HOST</type> 
<tags> 
<list> 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
</list> 
</tags> 
«sourceInfo» 
<list> 
<AssetSource/> 
</list> 
</sourceInfo> 
</Asset> 
<Asset> 
<id>2532638</id> 
<name>10.40.2.176</name> 
<created>2017-04-17T13:32:48Z</created> 
<modified>2017-05-14T14:06:03Z</modified> 
<type>HOST</type> 
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<tags> 
<list> 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
cysts 
</tags> 
<sourceInfo> 
<list> 
<AssetSource/> 
<Alist> 
«/sourceInfo» 
</Asset> 
</data> 
</ServiceResponse> 


XSD 


<platform API server>/aps/xsd/2.0/am/asset.xsd 
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Use Host Asset API to Uninstall agent 
/aps/rest/2.0/uninstall/am/hostasset/<id> 


[POST] 


You can use the Host Asset API to uninstall a single cloud agent and remove 
the associated agent host from your subscription. 


Where “id” (Required) is the asset ID of the agent you want to uninstall. This 
is the asset ID where the agent is installed. 


Good to Know - A request to uninstall an agent makes a call to the Qualys 
Cloud Platform to purge the host scan data (findings) for the agent host and 
remove the agent host from your subscription. 


Permissions required - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access” and CA Agent Permission 
“Uninstall Agent”. 


Input Parameters 


There are no input parameters. 


Sample - Uninstall single agent 


API request 


curl -u fo_username:password -X POST -H "Content-Type: text/xml" -- 
data-binary @single uninstall.xml 
"https://gualysapi.gualys.com/gps/rest/2.0/uninstall/am/hostasset/6851 
120" 


Contents of single uninstall.xml 


<?xml version="1.0" encoding="UTF-8" ?> <ServiceReguest> 
</ServiceReguest> 
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Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/2. 
0/am/hostasset.xsd"» 
«responseCode»SUCCESS«/responseCode» 
<count>1</count> 
<hasMoreRecords>false</hasMoreRecords> 
<data> 
<HostAsset> 
<id>6851120</id> 
<name>shwetas-Mac-mini.local</name> 
<created>2018-03-07T11:43:26Z</created> 
<modified>2018-03-08T06:49:56Z</modified> 
<type>HOST</type> 
<tags> 
<list> 
<TagSimple> 
<id>8652821</id> 
<name>Cloud Agent</name> 
</TagSimple> 
<TagSimple> 
<id>8654616</id> 
<name>DT Port</name> 
</TagSimple> 
</list> 
</tags> 
«sourceInfo» 
«list» 
<AssetSource/> 
</list> 
«/sourceInfo» 
«quebHostId»672160«/qwebHostId» 
<lastComplianceScan>2018-03- 
08T01:20:28Z</lastComplianceScan> 
<lastVulnScan>2018-03-08T06:20:10Z</lastVulnScan> 
<lastSystemBoot>2018-02-06T06:00:24Z</lastSystemBoot> 
<lastLoggedOnUser>root</lastLoggedOnUser > 
<os>Mac OS X 10.11.6</os> 
<dnsHostName>shwetas-Mac-mini.local</dnsHostName > 
<agentInfo> 
<agentVersion>1.7.0.64</agentVersion> 
<agentId>2b79e576-201b-49b9-9d2a- 
8e5cb70bfdcd«/agentId» 
«status»STATUS ACTIVE</status> 
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<lastCheckedIn>2018-03-08T06:49:55Z</lastCheckedIn> 
<connectedFrom>10.113.196.203</connectedFrom> 
<chirpStatus>Inventory Scan Complete</chirpStatus> 
<platform>MACOSX< /platform> 

<activatedModule>AGENT VM,AGENT PC</activatedModule> 
<manifestVersion>VULNSIGS-2.4.281.2- 
1</manifestVersion> 
<agentConfiguration> 
<id>432001</id> 
<name>Test abc</name> 
</agentConfiguration> 
<activationKey> 
«activationId»fc8aa44e-6e6d-492d-ae06- 
08e1676901ff«/activationId» 
«title»Test abc«/title» 
«/activationKey» 
«/agentInfo» 
<netbiosName>MACMINI- 3BFD26< /netbiosName> 
<address>10.113.196.203</address> 
<trackingMethod>QAGENT</trackingMethod> 
<manufacturer>Apple Inc.</manufacturer> 
<model>Macmini7,1</model> 
<totalMemory>8192</totalMemory> 
<timezone>+05:30</timezone> 
<biosDescription>Macmini7,1, MM71.0224.B00, 
2.24f32«/biosDescription» 
<openPort> 
<list> 
<HostAssetOpenPort> 
<port>49558< /port> 
<protocol>TCP</protocol> 
< /HostAssetOpenPort> 
<HostAssetOpenPort> 
<port>22</ port> 
<protocol>TCP</protocol> 
</HostAssetOpenPort> 


</list> 
</software> 
<vuln> 
<list> 
<HostAssetVuln> 
<qid>105145</qid> 
<hostInstanceVulnId>139552720</hostInstanceVulnId> 
<firstFound>2018-03- 


59 


Qualys Cloud Agent API 


Agents 
07T12:18:20Z«/firstFound» 
<lastFound>2018-03-08T06:20:10Z</lastFound> 

</HostAssetVuln> 

<HostAssetVuln> 
<qid>124557</qid> 

<hostInstanceVulnId>139552721</hostInstanceVulnId> 
<firstFound>2018-03- 
07T12:18:20Z«/firstFound» 

<lastFound>2018-03-08T06:20:10Z</lastFound> 

</HostAssetVuln> 


LHS E 
</vuln> 
<processor> 
<list> 
<HostAssetProcessor> 
<name>Intel Core i5</name> 
«speed»2600« /speed» 
</HostAssetProcessor> 
</ LHS E 
</processor> 
<volume> 
<list> 
<HostAssetVolume> 
<name>/</name> 
<size>975312896</size> 
<free>104348560</free> 
</HostAssetVolume> 
LHS E 
</volume> 
<account> 
<list> 
<HostAssetAccount> 
<username> mbsetupuser</username> 
</HostAssetAccount> 
<HostAssetAccount> 
<username> uucp</username> 
</HostAssetAccount> 


emet» 
</account> 
<networkInterface> 
<list> 
<HostAssetInterface> 
<interfaceName>en8</interfaceName> 
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<macAddress>38:c9:86:3b:fd:26</macAddress> 
<type>LOCAL</type> 
<address>fe80:0:0:0:0:0:0:1</address> 

<gatewayAddress>10.113.196.1</gatewayAddress> 
</HostAssetInterface> 
<HostAssetInterface> 
<hostname>shwetas-Mac-mini.local</hostname> 
<interfaceName>ene</interfaceName> 
<macAddress>38:c9:86:3b:fd:26</macAddress> 
<type>LOCAL</type> 
<address>10.113.196.203</address> 
<gatewayAddress>10.113.196.1</gatewayAddress> 
</HostAssetInterface> 


</list> 
</networkInterface> 
</HostAsset> 


</data> 
</ServiceResponse> 


XSD 


<platform API server>/aps/xsd/2.0/am/hostasset.xsd 
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Use Host Asset API to Uninstall agents in bulk 
/aps/rest/2.0/uninstall/am/hostasset 


[POST] 


If you want to filter using more parameters, you can use the Host Asset API to 
bulk uninstall cloud agents matching the specified filter criteria, and remove 
associated agent hosts from your subscription. 


Filter criteria required - For a bulk request it is mandatory to add this filter 
criteria in <ServiceRequest>: 


<Criteria field="tagName” operator="EQUALS">Cloud Agent</Criteria> 


Note: Proving at least one criteria in Service Request is mandatory for bulk 
uninstallation of agents. 


Good to Know - A request to uninstall agents makes a call to the Qualys 
Cloud Platform to purge the host scan data (findings) for the agent hosts and 
remove the agent hosts from your subscription. 


Permissions required - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access” and CA Agent Permission 
“Uninstall Agent”. 

Input Parameters 

To uninstall all agents, nothing other than the filter tagName EQUALS Cloud 
Agent is recommended. The more filters added to the request we'll uninstall a 
more refined list of agents. 

Use the following <ServiceRequest> parameters to select agents you want to 
uninstall. These parameters act as filters. When multiple filters are specified, 
parameters are combined using a logical AND. 


Filter operators are available for use with <ServiceRequest> parameters. 


Use of NOT EQUALS operator is now disabled during agent uninstall. This is 
to avoid unintended consequences of Tags or Assets being deleted or 
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updated. The service response includes an error message if you use the NOT 
EQUALS operator while uninstalling an agent. 


Supported filter operators 


Parameter 
qwebHostld 
lastVulnScan 
lastComplianceScan 
informationGatheredUpdated 
OS 

dnsHostName 
address 
vulnsUpdated 

id 

name 

created 

type 

netbiosName 
netbiosNetworklD 
networdGuid 


trackingMethod 


Description 
(integer) 
(date) 
(date) 
(date) 
(text) 
(text) 
(text) 
(date) 
(integer) 
(text) 
(date) 
(text) 
(string) 
(text) 
(text) 


(keyword) NONE, IP, DNSNAME, 
NETBIOS, INSTANCE ID, QAGENT 
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installedSoftware 
tagName 

tagid 

update 

Assets with cloud agents 
activationKey 


agentConfigurationName 


agentConfigurationld 


agentVersion 


lastCheckedln 


agentUuid 
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(integer) 
(text) 
(text) 
(integer) 


(date) 


(string) Allowed operator: EGUALS 


(string) Allowed operators: EAUALS, 
CONTAINS 


(long) Allowed operator: EAUALS 


(string) Allowed operators: EGUALS, 
LESSER, GREATER 


(date) Allowed operators: EGUALS, 
LESSER, GREATER 


(string) Agent ID (UUID) of the Agent 
host. 


Sample - Uninstall agents in bulk 


API reguest 


curl -u fo username:password -X POST -H "Content-Type: text/xml" -H 
"Cache-Control: no-cache" --data-binary @uninstall all agents.xml 
"http://gualysapi.gualys.com/gps/rest/2.0/uninstall/am/hostasset/" 


Contents of uninstall all agents.xml 


<?xml version="1.0" encoding="UTF-8" ?> 


<ServiceReguest> 
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<filters> 
<Criteria field="trackingMethod" 
operator="EQUALS">QAGENT</Criteria> 
«Criteria field="type" operator="EQUALS" >HOST</Criteria> 
<Criteria field="tagName" operator="EQUALS">Cloud 
Agent</Criteria> 
«Criteria field="lastVulnScan" operator="GREATER">2018-03- 
08T05:16:56Z</Criteria> 

</filters> 

</ServiceRequest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/2. 
0/am/hostasset.xsd"» 
«responseCode»SUCCESS«/responseCode» 
<count>1</count> 
<hasMoreRecords>false</hasMoreRecords> 
<data> 
<HostAsset> 
<id>6851120</id> 
<name>shwetas-Mac-mini.local</name> 
<created>2018-03-07T11:43:26Z</created> 
<modified>2018-03-08T06:49:56Z</modified> 
<type>HOST</type> 
<tags> 
GSE 
<TagSimple> 
<id>8652821</id> 
<name>Cloud Agent</name> 
</TagSimple> 
<TagSimple> 
<id>8654616</id> 
<name>DT Port</name> 
</TagSimple> 
</list> 
</tags> 
«sourceInfo» 
<list> 
<AssetSource/> 
liste 
</sourceInfo> 


65 


Qualys Cloud Agent API 


Agents 
«quebHostId»672160«/qwebHostId» 
<lastComplianceScan>2018-03- 
08T01:20:28Z</lastComplianceScan> 
<lastVulnScan>2018-03-08T06:20:10Z</lastVulnScan> 
<lastSystemBoot>2018-02-06T06:00:24Z</lastSystemBoot> 
<lastLoggedOnUser>root</lastLoggedOnUser > 
<os>Mac OS X 10.11.6</os> 
<dnsHostName>shwetas-Mac-mini.local</dnsHostName> 
<agentInfo> 
<agentVersion>1.7.0.64</agentVersion> 
<agentId>2b79e576-201b-49b9-9d2a- 
8e5cb70bfdcd«/agentId» 
<status>STATUS ACTIVE</status> 
<lastCheckedIn>2018-03-08T06:49:55Z</lastCheckedIn> 
<connectedFrom>10.113.196.203</connectedFrom> 
<chirpStatus>Inventory Scan Complete</chirpStatus> 
<platform>MACOSX</platform> 
<activatedModule>AGENT_VM,AGENT_PC</activatedModule> 
<manifestVersion>VULNSIGS-2.4.281.2- 
1</manifestVersion> 
<agentConfiguration> 
<id>432001</id> 
<name>Test_abc</name> 
</agentConfiguration> 
<activationKey> 
«activationId»fc8aa44e-6e6d-492d-ae06- 
08e1676901ff«/activationId» 
«title»Test abc«/title» 
«/activationKey» 
«/agentInfo» 
<netbiosName>MACMINI - 3BFD26< /netbiosName> 
<address>10.113.196.203</address> 
<trackingMethod>QAGENT</trackingMethod> 
<manufacturer>Apple Inc.</manufacturer> 
<model>Macmini7,1</model> 
<totalMemory>8192</totalMemory> 
<timezone>+05:30</timezone> 
<biosDescription>Macmini7,1, MM71.0224.B00, 
2.24f32</biosDescription> 
<openPort> 
<list> 
<HostAssetOpenPort> 
<port>49558</port> 
<protocol>TCP</protocol> 
</HostAssetOpenPort> 
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<HostAssetOpenPort> 
<port>22</port> 
<protocol>TCP</protocol> 
< /HostAssetOpenPort> 


</list> 
</software> 
<vuln> 
<list> 
<HostAssetVuln> 
<qid>105145</qid> 
<hostInstanceVulnId>139552720< /hostInstanceVulnId> 
<firstFound>2018-03- 
07T12:18:20Z«/firstFound» 
<lastFound>2018-03-08T06:20:10Z</lastFound> 
</HostAssetVuln> 
<HostAssetVuln> 
<qid>124557</qid> 
<hostInstanceVulnId>139552721</hostInstanceVulnId> 
<firstFound>2018-03- 
07T12:18:20Z«/firstFound» 
<lastFound>2018-03-08T06:20:10Z</lastFound> 
< /HostAssetVuln> 


</list> 
</vuln> 
<processor> 
<list> 
<HostAssetProcessor> 
<name>Intel Core i5</name> 
«speed»2600« / speed» 
</HostAssetProcessor> 
</last> 
</processor> 
<volume> 
<list> 
<HostAssetVolume> 
<name>/</name> 
<size>975312896</size> 
<free>104348560</free> 
</HostAssetVolume> 
</list> 
</volume> 
<account> 
<list> 
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<HostAssetAccount> 
<username> mbsetupuser</username> 
< /HostAssetAccount> 
<HostAssetAccount> 
«username» uucp</username> 
</HostAssetAccount> 


</list> 
</account> 
<networkInterface> 
ESE 
<HostAssetInterface> 
<interfaceName>en8</interfaceName> 
<macAddress>38:c9:86:3b:fd:26</macAddress> 
<type>LOCAL</type> 
<address>fe80:0:0:0:0:0:0:1</address> 
<gatewayAddress>10.113.196.1</gatewayAddress> 
</HostAssetInterface> 
<HostAssetInterface> 
<hostname>shwetas-Mac-mini.local</hostname> 
<interfaceName>ene</interfaceName> 
<macAddress>38:c9:86:3b:fd:26</macAddress> 
<type>LOCAL</type> 
<address>10.113.196.203</address> 
<gatewayAddress>10.113.196.1</gatewayAddress> 
</HostAssetInterface> 


</list> 
</networkInterface> 
</HostAsset> 


</data> 
</ServiceResponse> 


XSD 


<platform API server>/aps/xsd/2.0/am/hostasset.xsd 
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Get activation key details 
/aps/rest/1.0/get/ca/agentactkey/<id> 


[GET] [POST] 


Returns details on a selected activation key in the user's account. 
Where “id” (Reguired) is the activation key ID of interest. 


Permissions reguired - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access” and CA Activation Key 
Permission “View Activation Key”. 


Input Parameters 


There are no input parameters. 
Sample - View details on activation key 


API reguest 


curl -X GET -H "X-Reguested-With: curl" -H “Authorization: Basic 
AbcdAbcdAbcdAbcdAbcd" -H "Cache-Control: no-cache" 
"https://qualysapi.qualys.com/qps/rest/1.0/get/ca/agentactkey/25002" 


Response 


<?xml version="1.0" encoding-" UTF-8"?» 
«ServiceResponse xmlns:xsi-"http://www.w3.0rg/2001/XMLSchema- instance" 
xsi:noNamespaceSchemaLocation="https://qualysapi.qualys.com/qps/xsd/1. 
0/ca/agentactkey.xsd"» 

«responseCode»SUCCESS«/responseCode» 

<count>1</count> 

<data> 

<AgentActKey> 
<id>25002</id> 
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<activationKey>dc5e51f9-89de-47e2-ad35- 


26d5ee0f865d</activationKey> 


<status>ACTIVE</status> 
<countPurchased>@</countPurchased> 
<countUsed>0</countUsed> 
<datePurchased>2015-10-05T23:05:42Z</datePurchased> 
<type>UNLIMITED</type> 
<isDisabled>false</isDisabled> 
<modules> 
<list> 
<ActivationKeyModule> 
<license>VM LICENSE</license> 
</ActivationKeyModule> 
</list> 
</modules> 
<tags> 
elks 
<Tag> 
<id>522325</id> 
<name>Temp Tag</name> 
</Tag> 
LHS E 
</tags> 
<agents> 
<i Sty > 
</agents> 
«ownerId»364812443«/ownerId» 


«/AgentActKey» 


«/ServiceResponse» 


«platform API server»/qps/xsd/1.0/ca/agentactkey.xsd 
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Search activation keys 
/aps/rest/1.0/search/ca/agentactkey/ 


[POST] 


Returns details on activation keys in the user's account. 


Pagination - A maximum of 100 activation keys are returned by default. To 
customize this specify a “preferences” tag in the POST body of your request. 
Learn more about pagination 


Limit your results - Use the optional “fields” parameter to limit the amount of 
information returned. Learn more about limiting your results 


Permissions required - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access” and CA Activation Key 
Permission “View Activation Key”. 


Input Parameters 


Use the following <ServiceRequest> parameters to filter the list. Filter 
operators are available for use with <ServiceRequest> parameters. 


Supported filter operators 


Parameter Description 


countPurchased (optional if type is COUNT LIMITED or 
(Integer) COUNT. TIME. LIMITED) Search for keys with number 
of keys purchased. Value is 1 or more. 


activationKey (optional) Search for agents using a certain key. 
(String) 

id (number) (optional) Search for keys with a certain key ID. 
isDisabled (optional) Set to true to search for disabled keys. By 
(boolean) default is set to false. 
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Sample - Search activation keys 


API reguest 


curl -u username:password -X POST -H "X-Reguested-With: curl" -H 
"Content-Type: text/xml" -H "Cache-Control: no-cache" --data-binary 
get all keys.xml 
"https://qualysapi.qualys.com/qps/rest/1.0/search/ca/agentactkey/" 
Note: “get all keys.xml" contains the request POST data. 


Contents of get all keys.xml 


<?xml version="1.0" encoding-" UTF-8" ?> 
<ServiceReguest> 
</ServiceReguest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="http://gualysapi.gualys.com/portal- 
api/xsd/1.0/ca/agentactkey.xsd"> 
<responseCode>SUCCESS</responseCode> 
<count>9</count> 
<hasMoreRecords>false</hasMoreRecords> 
<data> 
<AgentActKey> 
<id>4689401</id> 
<activationKey>64849169-2d44-4e65-af90- 
07a499f9c54f«/activationKey» 
<status>ACTIVE</status> 
<countPurchased>0</countPurchased> 
<countUsed>6</countUsed> 
<datePurchased>2021-08-27T08:07:06Z</datePurchased> 
<type>UNLIMITED</type> 
<networkId>0</networkId> 
<isDisabled>false</isDisabled> 
<applyOnAgents>true</applyOnAgents> 
<modules> 
<list> 
<ActivationKeyModule> 
<license>PC_LICENSE</license> 
</ActivationKeyModule> 
</list> 
</modules> 
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<tags> 
<list> 
<Tag> 
<id>16802774</id> 
<name>Tag02</name> 
</Tag> 
«bust: 
</tags> 
<agentCount>6</agentCount> 
<suspendSelfPatch>false</suspendSelfPatch> 
</AgentActKey> 
<AgentActKey> 
<id>4899401</id> 
<activationKey>e4c270a9-bc67-4311-81f3- 
eaeb256c749f</activationKey> 
<status>ACTIVE</status> 
<countPurchased>0</countPurchased> 
<countUsed>2</countUsed> 
<datePurchased>2021-10-26T11:45:50Z</datePurchased> 
<type>UNLIMITED</type> 
<title>Test Key IBM updat</title> 
«networkId»0«/networkId» 
«isDisabled»false«/isDisabled» 
«applyOnAgents»true«/applyOnAgents» 
«modules» 
«list» 
<ActivationKeyModule> 
<license>PM</license> 
</ActivationKeyModule> 
<ActivationKeyModule > 
<license>VM LICENSE</license> 
</ActivationKeyModule> 
</LUSE> 
</modules> 
<agentCount>2</agentCount> 
<suspendSelfPatch>false</suspendSelfPatch> 
</AgentActKey> 
</data> 
</ServiceResponse> 


XSD 


<platform API server>/qps/xsd/1.0/ca/agentactkey.xsd 
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Create activation key 
/aps/rest/1.0/create/ca/agentactkey/ 


[POST] 


Create an activation key. 


Permissions required - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access” and CA Activation Key 
Permission “Create Activation Key”. 


Input Parameters 


These <ServiceRequest> parameters are used to create an activation key. 
Filter operators are available for use with <ServiceRequest> parameters. 


Supported filter operators 


Parameter Description 


type (string) (required) Key type. Valid is one of: UNLIMITED, 
SOUND S DV E THESE) 
COUNT IE DA SES ID 


countPurchased (required if type is COUNT. LIMITED or 
(Integer) COUNT. TIME LIMITED) Number of keys purchased. 
Value is 1 or more. 


expireDate (required if type is TIME LIMITED or 

(Date) COUNT TIME LIMITED) Key expiration date. Date is 
specified in UTC/GMT format, i.e. YYYY-MM- 
DD[THH:MM:SSZ 


modules (string) (optional) Provision one or more modules for this key. 
Value is one of: VM LICENSE, PC LICENSE, SCA, PM, 
SA, FIM, EDR 


tags (string) (optional) Add tags to this key. These tags will be 


74 


Qualys Cloud Agent API 
Activation Keys 


added to agents installed with key. 


Sample - Create activation key 


API reguest 


curl -X POST -H "Content-Type: text/xml" -H "X-Reguested-With: curl" - 
H "Authorization: Basic AbcdAbcdAbcdAbcdAbcd" -H "Cxml" -H "Cache- 
Control: no-cache" --data-binary (dkey create.xml 
"https://qualysapi.qualys.com/qps/rest/1.0/create/ca/agentactkey/" 
Note: “key create.xml" contains the request POST data. 


Contents of key create.xml 


<?xml version="1.0" encoding-" UTF-8"?» 
<ServiceReguest> 
<data> 
<AgentActKey> 
<title>example create from api</title> 
<countPurchased>0</countPurchased> 
<expireDate>2016-12-05T23:05:42Z</expireDate> 
<type>UNLIMITED</type> 
«ownerId»364812443«/ownerId» 
«modules» 
<list> 
<ActivationKeyModule> 
<license>VM_LICENSE</license> 
</ActivationKeyModule> 
<ActivationKeyModule> 
<license>PC_LICENSE</license> 
</ActivationKeyModule> 
<ActivationKeyModule> 
<license>SCA</license> 
</ActivationKeyModule> 
<ActivationKeyModule > 
<license>PM</license> 
</ActivationKeyModule> 
<ActivationKeyModule > 
<license>SA</license> 
</ActivationKeyModule> 
<ActivationKeyModule > 
<license>FIM</license> 
</ActivationKeyModule> 
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<ActivationKeyModule> 
<license>EDR</license> 
</ActivationKeyModule> 
CASE 
</modules> 
<tags> 
LESE 
<Tag> 
<id>522325</id> 
<name>Temp Tag</name> 
</Tag> 
</list> 
</tags> 
</AgentActKey> 
</data> 
</ServiceRequest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemaLocation="https://qualysapi.qualys.com/qps/xsd/1. 
0/ca/agentactkey.xsd"» 
<responseCode>SUCCESS</responseCode> 
<count>1</count> 
<data> 
<AgentActKey> 
<id>59001</id> 
<activationKey>548ec9eb-9ee4-45d9-aa2f- 
f3083983bf3c«/activationKey» 
<status>ACTIVE</status> 
<countPurchased>8</countPurchased> 
<countUsed>0</countUsed> 
<datePurchased>2016-09-07T14:48:15Z</datePurchased> 
<type>UNLIMITED</type> 
<title>example key create from api</title> 
<isDisabled>false</isDisabled> 
<modules> 
<list> 
<ActivationKeyModule> 
<license>VM LICENSE</license> 
</ActivationKeyModule > 
<ActivationKeyModule> 
<license>PC LICENSE</license> 
</ActivationKeyModule> 
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<ActivationKeyModule> 
<license>SCA</license> 
</ActivationKeyModule> 
<ActivationKeyModule> 
<license>PM</license> 
</ActivationKeyModule> 
<ActivationKeyModule> 
<license>SA</license> 
</ActivationKeyModule> 
<ActivationKeyModule> 
<license>FIM</license> 
</ActivationKeyModule > 
<ActivationKeyModule> 
<license>EDR</license> 
</ActivationKeyModule > 
</list> 
</modules> 
<tags> 
<list> 
<Tag> 
<1d>522325</1d> 
<name>Temp Tag</name> 
</Tag> 
List 
</tags> 
«ownerId»364812443«/ownerId» 
</AgentActKey> 
</data> 
</ServiceResponse> 


XSD 


«platform API server>/qps/xsd/1.0/ca/agentactkey.xsd 
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Delete activation key 
/aps/rest/1.0/delete/ca/agentactkey/<id> 


[POST] 


Delete an activation key in the user's account. It's not possible to delete a key 
that has active agents associated with it. 


Where “id” (Reguired) is the ID of the activation key to be deleted. 
Permissions reguired - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access" and CA Activation Key 
Permission “Delete Activation Key". 


Input Parameters 


There are no input parameters. 


Sample - Delete activation key 


API reguest 


curl -u fo username:password -X POST -H "X-Reguested-With: curl" -H 
"Content-Type: text/xml" -H "Cache-Control: no-cache" --data-binary 
delete key.xml 
"https://qualysapi.qualys.com/qps/rest/1.0/delete/ca/agentactkey/59001 


Note: “delete key.xml” contains the request POST data. 


Contents of delete key.xml 


<?xml version="1.0" encoding-" UTF-8"?» 
<ServiceReguest> 
</ServiceReguest> 


Response 
<?xml version="1.0" encoding="UTF-8"?> 
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<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/1. 
0/ca/agentactkey.xsd"» 

<responseCode>SUCCESS</responseCode> 
<count>1</count> 
<data> 
<AgentActKey> 
<id>59001</id> 
</AgentActKey> 
</data> 
</ServiceResponse> 


XSD 


<platform API server>/qps/xsd/1.0/ca/agentactkey.xsd 
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Update activation key 
/aps/rest/1.0/update/ca/agentactkey/<id> 


[POST] 


Update an activation key in the user's account. 
Where “id” (Required) is the ID of the activation key to be updated. 
Permissions required - Managers with full scope. Other users must have these 


permissions: Access Permission “API Access” and CA Activation Key 
Permission “Edit Activation Key”. 


Input Parameters 


These <ServiceRequest> parameters are used to update an activation key. 
Filter operators are available for use with <ServiceRequest> parameters. 


Supported filter operators 


Parameter Description 
id (Integer) (required) ID of activation key to be updated. 
type (string) (required) Key type. Valid is one of: UNLIMITED, 


COUNT_LIMITED, TIME_LIMITED, 
COUNT_TIME_LIMITED 


countPurchased (required if type is COUNT_LIMITED or 
(Integer) COUNT. TIME LIMITED) Number of keys purchased. 
Value is 1 or more. 


expireDate (reguired if type is TIME. LIMITED or 

(Date) COUNT. TIME. LIMITED) Key expiration date. Date is 
specified in UTC/GMT format, i.e. YYYY-MM- 
DD[THH:MM:SSZ 


modules (string) (optional) Provision one or more modules for this key. 
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Value is one oi: VM LICENSE, PE- LICENSE, SCA PM, 
SA, EDR, FIM 


tags (string) (optional) Add tags to this key. These tags will be 
added to agents installed with key. 


isDisabled (optional) Set to true to disable or false to keep active. 
(boolean) 


applyOnAgents (optional) Set to true to apply changes in the update 

(boolean) reguest to all existing agents. Changes include tags, 
licenses and limits. By default set to false and changes 
are not applied to all existing agents. 


Sample - Update activation key 


API reguest 


curl -X POST -H "X-Reguested-With: curl“ -H "Authorization: Basic 
AbcdAbcdAbcdAbcdAbcd" -H "Content-Type: text/xml" -H "Cache-Control: 
no-cache" --data-binary @key_update. xml 
"https://qualysapi.qualys.com/qps/rest/1.0/update/ca/agentactkey/6201" 
Note: “key update.xml" contains the request POST data. 


Contents of key update.xml 


<?xml version="1.0" encoding-"UTF-8"?» 
<ServiceReguest> 
<data> 
<AgentActKey> 
<id>6201</id> 
<title>example key updated from api</title> 
<countPurchased>0</countPurchased> 
<expireDate>2016-12-05T23:05:42Z</expireDate> 
<type>UNLIMITED</type> 
«ownerId»364812443«/ownerId» 
«applyOnAgents»true«/applyOnAgents» 
«modules» 
<list> 
<ActivationKeyModule> 
<license>VM_LICENSE</license> 
</ActivationKeyModule> 
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<ActivationKeyModule> 

<license>PC LICENSE</license> 
</ActivationKeyModule> 
<ActivationKeyModule> 

<license>SCA</license> 
</ActivationKeyModule> 
<ActivationKeyModule > 

<license>PM</license> 
</ActivationKeyModule> 
<ActivationKeyModule> 

<license>SA</license> 
</ActivationKeyModule> 
<ActivationKeyModule> 

<license>FIM</license> 
</ActivationKeyModule> 
<ActivationKeyModule > 

<license>EDR</license> 
</ActivationKeyModule> 


</list> 
</modules> 
<tags> 
lis > 
<Tag> 
<1d>522325</id> 
<name>Temp Tag</name> 
</Tag> 
</List> 
</tags> 
</AgentActKey> 
</data> 
</ServiceRequest> 
Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/1. 
8/ca/agentactkey.xsd" > 
<responseCode >SUCCESS</responseCode> 
<count>1</count> 
<data> 
<AgentActKey> 
<id>6201</id> 
<title>example key updated from api</title> 
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<activationKey>548ec9eb-9ee4-45d9-aa2f- 
f3083983bf3c«/activationKey» 

<status>ACTIVE</status> 

<countPurchased>0</countPurchased> 

<countUsed>@</countUsed> 

<datePurchased>2016-09-07T14:48:15Z</datePurchased> 

<type>UNLIMITED</type> 

<title>example key create from api</title> 

<isDisabled>false</isDisabled> 

«applyOnAgents»true«/applyOnAgents» 

«modules» 

«list» 
«ActivationKeyModule» 

«license»VM LICENSE«/license» 
</ActivationKeyModule > 
<ActivationKeyModule> 

<license>PC LICENSE</license> 
</ActivationKeyModule > 
<ActivationKeyModule> 

<license>SCA</license> 
</ActivationKeyModule> 
<ActivationKeyModule> 

<license>PM</license> 
</ActivationKeyModule> 
<ActivationKeyModule> 
<license>SA</license> 
</ActivationKeyModule > 
<ActivationKeyModule> 
<license>FIM</license> 
</ActivationKeyModule > 
<ActivationKeyModule> 
<license>EDR</license> 
</ActivationKeyModule > 
«lust» 
</modules> 
<tags> 
ELSE 
<Tag> 
<id>522325</id> 
<name>Temp Tag</name> 
</Tag> 
</list> 
</tags> 
«ownerId»364812443«/ownerId» 
</AgentActKey> 
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</data> 
</ServiceResponse> 


XSD 


«platform API server>/qps/xsd/1.0/ca/agentactkey.xsd 
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Get configuration profile details 
/aps/rest/1.0/get/ca/agentconfig/<id> 


[GET] [POST] 


Returns details on a selected configuration profile in the user's account. 
Where “id” (Reguired) is the ID of the configuration profile of interest. 


Permissions reguired - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access" and CA Configuration Profile 
Permission “View Configuration Profile". 


Input Parameters 


There are no input parameters. 


Sample - View details on configuration profile 


API reguest 


curl -X GET -H "X-Reguested-With: curl“ -H "Authorization: Basic 
AbcdAbcdAbcdAbcdAbcd" -H "Content-Type: text/xml" -H "Cache-Control: 
no-cache" 
"https://qualysapi.qualys.com/qps/rest/1.0/get/ca/agentconfig/9000" 


Response 


<?xml version="1.0" encoding-" UTF-8"?» 
«ServiceResponse xmlns:xsi-"http://www.w3.0rg/2001/XMLSchema- instance" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/1. 
0/ca/agentconfig.xsd"» 

«responseCode»SUCCESS«/responseCode» 

<count>1</count> 

<data> 

<AgentConfig> 
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<id>9000</id> 
<name>suspend</name> 
<isDefault>0</isDefault> 
<createdDate>2017-01-16T14:55:43Z</createdDate> 
<createdBy>Alex Kim (guays ak12)</createdBy> 
<tags> 
<includeTags> 
<list> 
<ConfigTag> 
<id>256926</id> 
<uuid>fe2ff339-e262-4cf4-a12d- 
85daed5fc6ae</uuid> 
<name>My Tag</name> 
</ConfigTag> 
</list> 
</includeTags> 
<includeResolution>ANY</includeResolution> 
<excludeTags/ > 
«tagSetUuid»f11e09bf-3e7e-4780-ae00- 
211f33660d6f«/tagSetUuid» 
«/tags» 
<suspendScanning>true</suspendScanning> 
<priority>12</priority> 
<totalAgents>1</totalAgents> 
<blackoutConfig> 
<settings> 
<list/> 
</settings> 
</blackoutConfig> 
<performanceProfile> 
<settings> 
<list> 
<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_PROVISION</key> 
<value>0</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_UPLOAD_CHANGELIST</key> 
<value>5</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>FILE UPLOAD FRAGMENT SIZE IN KB</key> 
<value>8</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
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«key»AGENT LOGGING LEVEL</key> 
<value>Verbose</value> 

</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
«key»THROTTLE EVENT COMM DOWNLOAD</key> 
<value>8</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_DOWNLOAD_MANIFEST</key> 
<value>0</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>THROTTLE EVENT SCAN</key> 
<value>8</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT CHECK REVOCATION</key> 
«value»3600«/value» 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>FILE DOWNLOAD FRAGMENT SIZE IN KB</key> 
<value>0</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_DOWNLOAD_SELF_PATCH</key> 
<value>0</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT EXECUTE SETUP</key> 
<value>0</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT DOWNLOAD SNAPSHOT</key> 
<value>0</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>THROTTLE EVENT COMM UPLOAD</key> 
<value>0</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_STATUS</key> 
<value>900</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_CONFIG</key> 
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<value>8</value> 
</PerformanceLevelSettings> 
</list> 
</settings> 
</performanceProfile> 
</AgentConfig> 
</data> 
</ServiceResponse> 


XSD 


<platform API server>/qps/xsd/1.0/ca/agentconfig.xsd 
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Search configuration profiles 
/aps/rest/1.0/search/ca/agentconfig/ 


[POST] 


Returns details on configuration profiles in the user's account. 


Pagination - A maximum of 100 configuration profiles are returned by default. 
To customize this specify a “preferences" tag in the POST body of your 
reguest. Learn more about pagination 


Limit your results - Use the optional “fields" parameter to limit the amount of 
information returned. Learn more about limiting your results 


Permissions reguired - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access” and CA Configuration Profile 
Permission “View Configuration Profile". 


Input Parameters 


Use the following <ServiceReguest> parameters to filter the list. Filter 
operators are available for use with <ServiceReguest> parameters. 


Supported filter operators 


Parameter Description 

name (string) (optional) Search for configuration profile with a given 
name. 

id (Integer) (optional) Search for configuration profile with a given 


configuration profile ID. 


Sample - Search configuration profiles 


API reguest 
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curl -u fo username:password -X POST -H "X-Requested-With: curl" -H 
"Content-Type: text/xml" -H "Cache-Control: no-cache" --data-binary 
get all config.xml 
"https://qualysapi.qualys.com/qps/rest/1.0/search/ca/agentconfig/" 
Note: *get all config.xml" contains the request POST data. 


Contents of get all config.xml 


<?xml version="1.0" encoding-" UTF-8" ?> 
<ServiceReguest> 
</ServiceReguest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/1. 
0/ca/agentconfig.xsd"» 
<responseCode>SUCCESS</responseCode> 
<count>14</count> 
<hasMoreRecords>false</hasMoreRecords> 
<data> 
<AgentConfig> 
<id>8099</id> 
<name>Initial Profile - SSN3</name> 
<isDefault>1</isDefault> 
«createdDate»2015-06-09T22:29:51Z«/createdDate» 
«description»Platform Default Config«/description» 
«suspendScanning»false«/suspendScanning» 
<totalAgents>0</totalAgents> 
<blackoutConfig> 
<settings> 
<list/> 
</settings> 
</blackoutConfig> 
<performanceProfile> 
<settings> 
<list> 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT PROVISION«/key» 
«value»1800«/value» 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT UPLOAD CHANGELIST</key 
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<value>5</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>FILE UPLOAD FRAGMENT. SIZE IN KB</key> 
<value>1024</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>AGENT_LOGGING_LEVEL</key> 
<value>Verbose</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
«key»THROTTLE EVENT COMM DOWNLOAD</key> 
<value>10</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_DOWNLOAD_MANIFEST</key 


«value»3600«/value» 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>THROTTLE EVENT SCAN</key> 

<value>10</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>FILE DOWNLOAD FRAGMENT SIZE IN KB</ke 


<value>1024</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>INTERVAL EVENT DOWNLOAD SELF PATCH</k 


«value»3600«/value» 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>INTERVAL EVENT EXECUTE SETUP</key> 

<value>300</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>INTERVAL EVENT DOWNLOAD SNAPSHOT</key 


<value>120</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>THROTTLE EVENT. COMM UPLOAD</key> 
<value>10</value> 
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</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>INTERVAL EVENT STATUS</key> 
«value»900«/value» 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT CONFIG</key> 
<value>3600</value> 
</PerformanceLevelSettings> 
LS > 
</settings> 
</performanceProfile> 
</AgentConfig> 
<AgentConfig> 
<id>9000</id> 
<name>suspend</name> 
<isDefault>0</isDefault> 
<createdDate>2016-02-16T14:55:43Z</createdDate> 
<createdBy>Chintan Shah (bhart cs)</createdBy> 
<suspendScanning>true</suspendScanning> 
<priority> 
<priority>12</priority> 
</priority> 
<totalAgents>1</totalAgents> 
<blackoutConfig> 
<settings> 
<list/> 
</settings> 
</blackoutConfig> 
<performanceProfile> 
<settings> 
<list> 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT PROVISION< /key > 
<value>0</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT UPLOAD CHANGELIST</key 


<value>10</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>FILE UPLOAD FRAGMENT SIZE IN KB</key> 

<value>8</value> 
</PerformanceLevelSettings> 
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<PerformanceLevelSettings> 
«key»AGENT LOGGING LEVEL</key> 
«value»Verbose«/value» 
«/PerformanceLevelSettings» 
<PerformanceLevelSettings> 
«key»THROTTLE EVENT COMM DOWNLOAD«/key» 
«value»0«/value» 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT DOWNLOAD MANIFEST</key 


<value>0</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>THROTTLE EVENT. SCAN</key> 

<value>0</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>INTERVAL_EVENT_CHECK_REVOCATION</key> 

<value>3600</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>FILE DOWNLOAD FRAGMENT SIZE IN KB</ke 


<value>8</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>INTERVAL EVENT DOWNLOAD SELF PATCH</k 


<value>0</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_EXECUTE_SETUP</key> 
<value>0</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT DOWNLOAD SNAPSHOT</key 


<value>8</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>THROTTLE EVENT COMM UPLOAD</key> 

<value>0</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
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<key>INTERVAL EVENT STATUS</key> 
<value>900</value> 

</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_CONFIG</key> 
<value>0</value> 
</PerformanceLevelSettings> 
</List> 
</settings> 
</performanceProfile> 
</AgentConfig> 


</ServiceResponse> 


XSD 


<platform API server>/aps/xsd/1.0/ca/agentconfig.xsd 


94 


Qualys Cloud Agent API 
Configuration Profiles 


Create configuration profile 
/aps/rest/1.0/create/ca/agentconfig/ 


[POST] 


Create a configuration profile. 


Permissions required - Managers with full scope. Other users must have these 
permissions: Access Permission “API Access” and CA Configuration Profile 
Permission “Create Configuration Profile”. 


Input Parameters 


These <ServiceRequest> parameters are used to create/update a 
configuration profile. Filter operators are available for use with 
<ServiceRequest> parameters. 


Supported filter operators 


Parameter Description 


name (string) (required for create and update request) Name of 
configuration profile. 


description (string) (optional) Description of configuration profile. 


priority (Integer) (invalid for create request; optional for update 
request) Priority of configuration profile in relation 
to other profiles. Defaults to last maximum 
priority. (If priority is specified for a create 
request, the profile will not be created.) 


Example: If there are 3 configuration profiles a 


new profile added without priority will be given 
priority 4. 


isDefault (Integer) (required for create request; optional for update 
request) Defaults to O, ¡.e. configuration profile not 
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suspendScanning 
(boolean) 


preventAgentUpdate 
(boolean) 


inMemoryDbEnabled 
(boolean) 


tags (string) 


blackoutConfig 
(string) 


performanceProfile 
(string) 


id (Integer) 
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set as the default in the user's account. Set to 1 to 
set the configuration profile as the default. 


(optional) Defaults to false, i.e. the Suspend 
Scanning feature is not enabled. Set to true to 
enable the Suspend Scanning feature. 


(optional) Defaults to false, i.e. the Prevent Agent 
Update feature is not enabled. Set to true to 
enable the Prevent Agent Update feature. 


(optional) Defaults to false, i.e. the In-Memory 
SQLite Databases feature is not enabled. Set to 
true to enable the In-Memory SQLite Databases 
feature. 


(reguired for create reguest; optional for update 
reguest) Tags for the configuration profile. 


(optional) Blackout configuration for the 
configuration profile. 


(reguired for create reguest; optional for update 
reguest) Performance profile configuration blocks 
using parameters below. 


(reguired for update reguest; invalid for create 
reguest) ID ofthe configuration profile you want 
to update. 


Parameters for all agent OS and versions 


Parameter 


Description 


INTERVAL EVENT. STATUS Agent Status Interval - 


Consolidated interval an 
agent reguests information 
from the platform. Range: 
300-86,400 seconds. 
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Recommended: 600 for 
High performance, 1800 for 
Normal performance, 2400 
for Low performance. 


INTERVAL EVENT UPLOAD CHANGELIST Delta Upload Interval - 
Interval an agent attempts 


to upload detected 
changes. Range: 1-1800 
seconds. Recommended: 1 
for High performance, 5 for 
Normal performance, or 10 
for Low performance. 


FILE_UPLOAD_FRAGMENT_SIZE_IN_KB Chunk Sizes for File 
Fragment Uploads - The 
upload block size, and 
combined with Delta 
Upload Interval, determines 
network utilization. Range: 
64-10,240 KB. 
Recommended: 4096 for 
High performance, 2048 for 
Normal performance, 1024 
for Low performance. 


INTERVAL EVENT EXECUTE SETUP Upgrade Reattempt Interval 
- Interval (in seconds) an 
agent checks the platform 
for a new upgrade, if 
configured to do so. Range: 
180 seconds or more. 
Recommended: 300 for 
Low performance or Normal 
performance, 180 for High 
performance. 


AGENTIEOGGING LEVEL Logging level for agent - 
The amount and detail of 
log messages generated by 
the agent. Value can be 
Verbose, Info (i.e. 
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informational), Warn (i.e. 
Warning), Error or None. 
Recommended: Verbose for 
all performance levels. 


Windows specific parameters (versions 1.5 and above) 


Parameter Description 


CUM CPU Limit - Defines the percentage limit of the 
= processor core(s) used by the agent; lower 
percentages reduces CPU utilization at the expense of 
longer execution times. Range: 2-100%. 
Recommended: 80 for High performance, 20 for 
Normal performance, 5 for Low performance. 


Linux/Mac specific parameters (versions 1.6 and above) 


Parameter Description 


THROTTLE EVENT SCAN CPU Throttle - Tunes the amount of 
= = processing used by the CPU by introducing 

delays between agent executions: the higher 
the value, the less CPU utilized at the 
expense of longer execution times. Range: O- 
1,000 milliseconds. Recommended: O for 
High performance, 10 for Normal 
performance, 20 for Low performance. 


Legacy parameters - deprecated for new agents 


(Used for Windows 1.4 and below, and Linux/Mac 1.5 and below) These 
parameters are deprecated for new agents, but still used by older agent 
versions. 


Parameter Description 
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INTERVAL EVENT. DOWNLOAD. SNAPSHOT 


INTERVAL EVENT DOWNLOAD. MANIFEST 


INTERVAL EVENT. CONFIG 


THROTTLE EVENT COMM UPLOAD 
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Delta Confirmation 
Interval - Interval an 
agent checks platform 
for confirmation that 
changes were 
processed. Range: 60 
seconds or more. 
Recommended: 60 for 
High performance, 120 
for Normal 
performance, 300 for 
Low performance. 


Manifest Download 
Interval - Interval an 
agent checks platform 
for new instruction 
manifests. Range: 60 
seconds or more. 
Recommended: 60 for 
High performance, 
3600 for Normal 
performance, 10800 for 
Low performance. 


Configuration 
Download Interval - 
Interval an agent 
checks platform for 
new configuration 
profiles. Range: 60 
seconds or more. 
Recommended: 60 for 
High performance, 
3600 for Normal 
performance, 10800 for 
Low performance. 


Network throttle Rx - 
The higher this value 
(in ms), the slower 
agent attempts to 
download from the 


THROTTLE EVENT COMM DOWNLOAD 


FILE DOWNLOAD FRAGMENT SIZE IN KB 


INTERVAL EVENT CHECK REVOCATION 
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platform; this combines 
with the download 
chunk size to determine 
network utilization. 
Range: 0-200 
milliseconds. 
Recommended: O for 
High performance, 10 
for Normal 
performance, 20 for 
Low performance. 


Network throttle Tx - 
The higher this value 
(in ms), the slower 
agent attempts to 
upload to the platform; 
this combines with the 
upload chunck size to 
determine network 
utilization. Range: O- 
200 milliseconds. 
Recommended: O for 
High performance, 10 
for Normal 
performance, 20 for 
Low performance. 


Chunk sizes for file 
fragment downloads - 
The download block 
size (in KB), and 
combined with 
Network throttle Rx, 
determines network 
utilization. Range: 64 or 
more KB. 
Recommended: 1024 
for all performance 
levels. 


Revocation Interval - 
Interval an agent 
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checks platform to see 
if it should uninstall 
itself. Range: 3600 
seconds or more. 
Recommended: 3600 
for all performance 
levels. 


INTERVAL EVENT PROVISION Provisioning Interval - 
Interval an agent 


attempts to self repair 
by reprovisioning with 
platform. Range: 60 
seconds or more. 
Recommended: 900 for 
all performance levels. 


INTERVAL EVENT DOWNLOAD SELF PATCH Upgrade Check Interval 
- Interval an agent 


checks platform for a 
new upgrade. Range: 
300 seconds or more. 
Recommended: 300 for 
High performance, 
3600 for Normal 
performance, 10800 for 
Low performance. 


Sample - Create configuration profile 


API reguest 


curl -X POST -H “Content-Type: text/xml" -H “Authorization: Basic 
AbcdAbcdAbcdAbcdAbcd" -H "Xurl" -H "Cache-Control: no-cache" --data- 
binary @config create.xml 
"https://qualysapi.qualys.com/qps/rest/1.0/create/ca/agentconfig/" 


Note: “config create.xml" contains the request POST data. 


Contents of config create.xml 


<?xml version="1.0" encoding-" UTF-8"?» 
<ServiceReguest> 
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<data> 
<AgentConfig> 
<name>Config profile created using api</name> 
<description>done using api</description> 
<priority></priority> 
<isDefault>0</isDefault> 
<suspendScanning>false</suspendScanning> 


<tags> 
<includeTags> 
<list> 
<ConfigTag> 
<id>6332818</id> 
<name>Tag1</name> 
</ConfigTag> 
</list> 
</includeTags> 


<includeResolution>ANY</includeResolution> 
<excludeTags></excludeTags> 
<excludeResolution>ANY</excludeResolution> 
</tags> 
<blackoutConfig> 
<settings> 
<list> 
<BlackoutConfig> 
<startHour>10</startHour> 
<endHour >16< /endHour > 
«monday»0« /monday> 
<tuesday>0</tuesday> 
<wednesday>1</wednesday> 
<thursday>0</thursday> 
<friday>0</friday> 
<saturday>0</saturday> 
<sunday>0</sunday> 
</BlackoutConfig> 
</list> 
</settings> 
</blackoutConfig> 
<performanceProfile> 
<settings> 
<list> 
<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_PROVISION</key> 
<value>60</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
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<key>INTERVAL EVENT UPLOAD CHANGELIST</key 


<value>60</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>FILE UPLOAD FRAGMENT SIZE IN KB</key> 

<value>666</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>AGENT LOGGING LEVEL</key> 

<value>Verbose</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>CPU LIMIT</key> 

<value>20</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>THROTTLE_EVENT_COMM_DOWNLOAD< /key> 

<value>100</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>INTERVAL_EVENT_DOWNLOAD_MANIFEST</key 


<value>200</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>THROTTLE_EVENT_SCAN</key> 

<value>0</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 


<key>FILE DOWNLOAD FRAGMENT SIZE IN KB</key> 
<value>1024</value> 


</PerformanceLevelSettings> 
<PerformanceLevelSettings> 


<key>INTERVAL EVENT DOWNLOAD SELF PATCH</key> 
<value>900</value> 


</PerformanceLevelSettings> 
<PerformanceLevelSettings> 


<key>INTERVAL_EVENT_EXECUTE_SETUP</key> 
<value>222</value> 


</PerformanceLevelSettings> 
<PerformanceLevelSettings> 


<key>INTERVAL EVENT DOWNLOAD SNAPSHOT</key> 
<value>66</value> 
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</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>THROTTLE EVENT COMM UPLOAD</key> 
<value>8</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT STATUS</key> 
<value>1000</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_CONFIG</key> 
<value>66</value> 
</PerformanceLevelSettings> 
</list> 
</settings> 
</performanceProfile> 
</AgentConfig> 
</data> 
</ServiceRequest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemaLocation="https://qualysapi.qualys.com/qps/xsd/1. 
0/ca/agentconfig.xsd"» 
«responseCode»SUCCESS«/responseCode» 
<count>1</count> 
<data> 
<AgentConfig> 
<id>151889</id> 
<name>Config profile created using api</name> 
<isDefault>0</isDefault> 
<createdDate>2017-02-20T09:35:04Z</createdDate> 
<createdBy>My Name</createdBy> 
<description>done using api</description> 
<tags> 
<includeTags/ > 
<includeResolution>ANY</includeResolution> 
<excludeTags/ > 
«tagSetUuid»f5edf058-c55b-40b8-bc32- 
94959ca4304c«/tagSetUuid» 
</tags> 
<suspendScanning>false</suspendScanning> 
<preventAgentUpdate>false</preventAgentUpdate> 
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<totalAgents>0</totalAgents> 
<blackoutConfig> 
<settings> 
<list> 
<BlackoutConfig> 
<startHour>18</startHour> 
<endHour >16< /endHour > 
«monday»0« /monday> 
<tuesday>0</tuesday> 
<wednesday>1</wednesday> 
<thursday>0</thursday> 
<friday>0</friday> 
<saturday>0</saturday> 
<sunday>0</sunday> 
</BlackoutConfig> 
Asie 
</settings> 
</blackoutConfig> 
<performanceProfile> 
<settings> 
<list> 
<PerformanceLevelSettings> 
«key»INTERVAL EVENT PROVISION«/key» 
«value»60«/value» 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>CPU LIMIT</key> 
<value>20</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT UPLOAD CHANGELIST</key> 
<value>60</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>FILE UPLOAD FRAGMENT SIZE IN KB«/key» 
<value>666</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
«key»AGENT LOGGING LEVEL</key> 
«value»Verbose«/value» 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
«key»THROTTLE EVENT COMM DOWNLOAD< /key > 
<value>100</value> 
</PerformanceLevelSettings> 
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<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_DOWNLOAD_MANIFEST</key> 

<value>200</value> 

</PerformanceLevelSettings> 

<PerformanceLevelSettings> 
<key>THROTTLE EVENT SCAN</key> 
«value»0«/value» 

</PerformanceLevelSettings> 

<PerformanceLevelSettings> 

<key>FILE DOWNLOAD FRAGMENT SIZE IN KB</key> 
<value>1024</value> 

</PerformanceLevelSettings> 

<PerformanceLevelSettings> 

<key>INTERVAL EVENT DOWNLOAD SELF PATCH</key> 
<value>333</value> 

</PerformanceLevelSettings> 

<PerformanceLevelSettings> 
<key>INTERVAL EVENT. EXECUTE SETUP</key> 
<value>222</value> 

</PerformanceLevelSettings> 

<PerformanceLevelSettings> 

<key>INTERVAL EVENT. DOWNLOAD SNAPSHOT</key> 
<value>66</value> 

</PerformanceLevelSettings> 

<PerformanceLevelSettings> 
<key>THROTTLE EVENT. COMM UPLOAD</key> 
<value>0</value> 

</PerformanceLevelSettings> 

<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_STATUS</key> 
<value>333</value> 

</PerformanceLevelSettings> 

<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_CONFIG</key> 
<value>66</value> 

</PerformanceLevelSettings> 

< (ELS > 
</settings> 
</performanceProfile> 
</AgentConfig> 
</data> 
</ServiceResponse> 


XSD 
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«platform API server>/aps/xsd/1.0/ca/agentconfig.xsd 
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Delete configuration profile 
/aps/rest/1.0/delete/ca/agentconfig/<id> 


[POST] 


Delete a configuration profile in the user’s account. 
Where “id” (Required) is the ID of the configuration profile to be deleted. 
Permissions required - Managers with full scope. Other users must have these 


permissions: Access Permission “API Access” and CA Configuration Profile 
Permission “Edit Configuration Profile”. 


Input Parameters 


There are no input parameters. 


Sample - Delete configuration profile 


API request 
curl -u fo username:password -X POST -H "Content-Type: text/xml" -H 
"Cache-Control: no-cache" --data-binary (delete config.xml 


"https://qualysapi.qualys.com/qps/rest/1.0/delete/ca/agentconfig/9000" 
Note: “delete config.xml" contains the request POST data. 


Contents of delete config.xml 


<?xml version="1.0" encoding-" UTF-8" ?> 
<ServiceReguest> 
</ServiceReguest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi-"http://www.w3.0rg/2001/XMLSchema- instance" 
xsi:noNamespaceSchemaLocation="https://qualysapi.qualys.com/qps/xsd/1. 
0/ca/agentconfig.xsd"» 

«responseCode»SUCCESS«/responseCode» 

<count>1</count> 
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<data> 
<AgentConfig> 
<id>9000</id> 
</AgentConfig> 
</data> 
</ServiceResponse> 


XSD 


<platform API server>/aps/xsd/1.0/ca/agentconfig.xsd 
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Update configuration profile 
/aps/rest/1.0/update/ca/agentconfig/ 


[POST] 


Update a configuration profile in the user's account. 
Permissions reguired - Managers with full scope. Other users must have these 


permissions: Access Permission “API Access" and CA Configuration Profile 
Permission “Edit Configuration Profile". 


Input Parameters 


See Input Parameters for Create Configuration Profile 


Sample - Update configuration profile 


API reguest 


curl -X POST -H "Content-Type: text/xml" -H “Authorization: Basic 
AbcdAbcdAbcdAbcdAbcd" -H "X-Reguested-With: curl" -H "Cache-Control: 
no-cache” --data-binary @config update.xml 
"https://qualysapi.qualys.com/qps/rest/1.0/update/ca/agentconfig/" 
Note: “config update.xml" contains the request POST data. 


Contents of config update.xml 


<?xml version="1.0" encoding-" UTF-8"?» 
<ServiceReguest> 
<data> 
<AgentConfig> 
<id>13002</id> 
<name>thru api - updated</name> 
<description>updated using api</description> 
<priority>2</priority> 
<isDefault>0</isDefault> 
<suspendScanning>false</suspendScanning> 
<tags> 
<includeTags> 
<list> 
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<ConfigTag> 
<id>256926</id> 
<name>CSHAH TEMP tag</name> 
</ConfigTag> 
</list> 
</includeTags> 
<includeResolution>ANY</includeResolution> 
<excludeTags> 
<list/> 
</excludeTags> 
<excludeResolution>ANY</excludeResolution> 
«tagSetUuid»ec78b2ce-74e8-4182-bdaf- 
8090f2983187«/tagSetUuid» 
«/tags» 
<blackoutConfig> 
<settings> 
<list/> 
</settings> 
</blackoutConfig> 
<performanceProfile> 
<settings> 
<list> 
<PerformanceLevelSettings> 
«key»INTERVAL EVENT PROVISION«/key» 
«value»3600«/value» 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT UPLOAD CHANGELIST</key> 
<value>5</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 


<key>FILE UPLOAD FRAGMENT. SIZE IN KB</key> 
<value>1024</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>AGENT LOGGING LEVEL</key> 
<value>Verbose</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
«key»THROTTLE EVENT COMM DOWNLOAD< /key > 
<value>20</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
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<key>INTERVAL EVENT DOWNLOAD MANIFEST</key 


«value»10800«/value» 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>THROTTLE EVENT SCAN</key> 

<value>20</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 


<key>FILE DOWNLOAD FRAGMENT SIZE IN KB</key> 
<value>1024</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 


<key>INTERVAL EVENT DOWNLOAD SELF PATCH</key> 
«value»10800«/value» 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_EXECUTE_SETUP</key> 
<value>300</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 


<key>INTERVAL EVENT DOWNLOAD SNAPSHOT«/key» 

«value»300«/value» 

</PerformanceLevelSettings> 

<PerformanceLevelSettings> 
<key>THROTTLE EVENT COMM UPLOAD</key> 
<value>20</value> 

</PerformanceLevelSettings> 

<PerformanceLevelSettings> 
<key>INTERVAL EVENT STATUS</key> 
«value»900«/value» 

</PerformanceLevelSettings> 

<PerformanceLevelSettings> 
<key>INTERVAL EVENT CONFIG</key> 
<value>10800</value> 

</PerformanceLevelSettings> 

</list> 
</settings> 
</performanceProfile> 
</AgentConfig> 
</data> 
</ServiceReguest> 
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Note: For the Update Configuration Profile API, if the 'settings' tags for 
performance profile are not provided or provided without any values, the 
existing settings for performance profile will be retained. 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceReguest> 
<data> 
<AgentConfig> 
<id>13002</id> 
<name>thru api - updated</name> 
<description>updated using api</description> 
<priority>2</priority> 
<isDefault>0</isDefault> 
<suspendScanning>false</suspendScanning> 
<tags> 
<includeTags> 
<list> 
<ConfigTag> 
<id>256926</id> 
<name>CSHAH TEMP tag</name> 
</ConfigTag> 
H > 
</includeTags> 
<includeResolution>ANY</includeResolution> 
<excludeTags> 
Est 
</excludeTags> 
<excludeResolution>ANY</excludeResolution> 
«tagSetUuid»ec78b2ce-74e8-4182-bdaf- 
8090f2983187«/tagSetUuid» 
«/tags» 
<blackoutConfig> 
<settings> 
<list/> 
</settings> 
</blackoutConfig> 
<performanceProfile> 
<settings> 
cst 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT PROVISION< /key > 
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<value>3600</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>INTERVAL EVENT UPLOAD CHANGELIST</key 


<value>5</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 


<key>FILE UPLOAD FRAGMENT SIZE IN KB</key> 
<value>1024</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
«key»AGENT LOGGING LEVEL</key> 
«value»Verbose«/value» 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>THROTTLE EVENT COMM DOWNLOAD< /key > 
<value>20</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 


<key>INTERVAL_EVENT_DOWNLOAD_MANIFEST</key> 
<value>10800</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 
<key>THROTTLE_EVENT_SCAN</key> 
<value>20</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 


<key>FILE DOWNLOAD FRAGMENT SIZE IN KB</key 

> 

<value>1024</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 


<key>INTERVAL EVENT. DOWNLOAD SELF. PATCH</ 

key> 

<value>10800</value> 
</PerformanceLevelSettings> 
<PerformanceLevelSettings> 

<key>INTERVAL EVENT EXECUTE SETUP</key> 

<value>300</value> 
</PerformanceLevelSettings> 
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<PerformanceLevelSettings> 


<key>INTERVAL EVENT DOWNLOAD SNAPSHOT</key> 
<value>300</value> 

</PerformanceLevelSettings> 

<PerformanceLevelSettings> 
<key>THROTTLE EVENT. COMM UPLOAD</key> 
<value>20</value> 

</PerformanceLevelSettings> 

<PerformanceLevelSettings> 
<key>INTERVAL EVENT STATUS</key> 
«value»900«/value» 

</PerformanceLevelSettings> 

<PerformanceLevelSettings> 
<key>INTERVAL_EVENT_CONFIG</key> 
<value>10800</value> 

</PerformanceLevelSettings> 

</list> 
</settings> 
</performanceProfile> 
</AgentConfig> 
</data> 
</ServiceReguest> 


XSD 


<platform API server>/aps/xsd/1.0/ca/agentconfig.xsd 
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Common Use Cases 


Get agent asset info for a single agent 
/aps/rest/2.0/get/am/hostasset/:id 


[GET] 


Returns details about a specific cloud agent in the user’s account. 
Where “id” (Required) is the ID of the host asset. 


Permissions required - User must have CA module enabled and have "API 
ACCESS” permission. 


Input Parameters 


There are no input parameters. 


Sample - Get agent asset info for a single agent 


API request 


curl -u "USERNAME:PASSWORD" -X "GET" -H "Content-Type: text/xml" 
https://qualysapi.qualys.com/qps/rest/2.0/get/am/hostasset/2872638 


Response 


<?xml version="1.0" encoding-" UTF-8"?» 
<ServiceResponse xmlns:xsi-"http://www.w3.0rg/2001/XMLSchema- instance" 
xsi:noNamespaceSchemaLocation="http://qualysapi.qualys.com/portal- 
api/xsd/2.0/am/hostasset.xsd"> 
<responseCode>SUCCESS</responseCode> 
<count>1</count> 
<hasMoreRecords>false</hasMoreRecords> 
<data> 
<HostAsset> 
<id>5214017</id> 
<name>113080-T450</name> 
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Common Use Cases 
<created>2018-04-12T07:23:41Z</created> 
<modified>2018-04-18T11:39:50Z</modified> 
<type>HOST</type> 
<tags> 

Ist 
<TagSimple> 
<id>7584632</id> 
<name>Cloud Agent</name> 
</TagSimple> 
iso 
</tags> 
«sourceInfo» 
KLSE 
<AssetSource/> 
</115t> 
«/sourceInfo» 
«quebHostId»140995«/qwebHostId» 
<lastComplianceScan>2017-04- 
18T11:00:57Z</lastComplianceScan> 
<lastVulnScan>2018-04-18T11:00:57Z</lastVulnScan> 
<lastSystemBoot>2018-04-17T15:16:15Z</lastSystemBoot> 
<lastLoggedOnUser >CORPYrkumar</lastLoggedOnUser > 
<domain>corp.gualys.com</domain> 
«fqdn»113080-T450.corp.qualys.com«/fqdn» 
«os»Microsoft Windows 10 Enterprise 10.0.10586 N/A 
Build 10586«/os» 
«dnsHostName»113080-T450«/dnsHostName» 
«agentInfo» 
<agentVersion>1.5.6.45</agentVersion> 
«agentId»33889e67-d898-4f74-9f19- 
27ae2265aedc</agentId> 
<status>STATUS ACTIVE</status> 
<lastCheckedIn>2017-04-18T11:39:29Z</lastCheckedIn> 
<connectedFrom>999.999.999.999</connectedFrom> 
<location>Redwood City, California United 
States</location> 
<locationGeoLatitude>37.536540</locationGeoLatitude> 
<locationGeoLongtitude>- 
122.25838</locationGeoLongtitude> 
<chirpStatus>Inventory Scan Complete</chirpStatus> 
<platform>Windows</platform> 
<activatedModule>AGENT VM,AGENT PC</activatedModule> 
<manifestVersion>VULNSIGS-VMPC-2.4.18- 
3</manifestVersion> 
<agentConfiguration> 
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Common Use Cases 
<id>197208</id> 
<name>for list</name> 
</agentConfiguration> 
<activationKey> 
<activationId>1b37b569-9bf6-444f-9330- 
94535696f272</activationId> 
<title>my</title> 
</activationKey> 
</agentInfo> 
<netbiosName>113080-T450</netbiosName> 
<networkGuid>6b48277c-0742-61c1-82bb- 
cacof9c4094a</networkGuid> 
<address>10.0.203.10</address> 
<trackingMethod>QAGENT</trackingMethod> 
<manufacturer >LENOVO< /manufacturer> 
«model»20BUAOAEIG«/model» 
<totalMemory>11984</totalMemory> 
<timezone>+05:30</timezone> 
<biosDescription>LENOVO JBET54WW (1.19 ), 
11/6/2015</biosDescription> 


</HostAsset> 


</data> 
</ServiceResponse> 


XSD 


<platform API server>/qps/xsd/2.0/am/hostasset.xsd 
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Get all agents for the account 
/aps/rest/2.0/search/am/hostasset/ 


[POST] 


Sample - Get all agents for the account 


API request 
curl -u "USERNAME:PASSWORD" -X "POST" -H "Content-Type: text/xml" -H 
"Cache-Control: no-cache" --data-binary @list_all_agents.xml 


"https://qualysapi.qualys.com/qps/rest/2.0/search/am/hostasset/" 


Contents of list all agents.xml 


<ServiceReguest> 
<filters> 
<Criteria field="tagName" operator="EQUALS">Cloud 
Agent</Criteria> 
</filters> 
</ServiceReguest> 


Response 


<?xml version="1.0" encoding-" UTF-8"?» 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/2. 
0/am/asset.xsd"» 
«responseCode»SUCCESS«/responseCode» 
<count>4</count> 
<hasMoreRecords>false</hasMoreRecords> 
<data> 
<Asset> 
<id>712038</id> 
<name>192.168.1.12</name> 
«created»2016-06-18T16:54:50Z«/created» 
«modified»2016-06-18T16:54:51Z«/modified» 
«type»HOST«/type» 
«tags» 
<list> 
<TagSimple> 
<id>509525</id> 
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Common Use Cases 
<name>Cloud Agent</name> 
</TagSimple> 
co Tet» 
</tags> 
<sourceInfo> 
<list> 
<AssetSource/> 
</list> 
«/sourceInfo» 
</Asset> 
<Asset> 
<id>2532638</id> 
«name»10.40.2.176«/name» 
<created>2017-04-17T13:32:48Z</created> 
<modified>2017-05-14T14:06:03Z</modified> 
<type>HOST</type> 
<tags> 
<list> 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
</list> 
</tags> 
<sourceInfo> 
<list> 
<AssetSource/> 
</list> 
</sourceInfo> 
</Asset> 
</data> 
</ServiceResponse> 


XSD 


<platform API server>/aps/xsd/2.0/am/asset.xsd 
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Get count of agents installed 
/aps/rest/2.0/count/am/hostasset 


[POST] 


Sample - Get count of agents installed 


API request 
curl -u fo_username:password -X POST -H "Content-Type: text/xml" -H 
"Cache-Control: no-cache" --data-binary @get_all_agents_count.xml 


"https://qualysapi.qualys.com/qps/rest/2.0/count/am/hostasset" 


Contents of get all agents count.xml 


<?xml version="1.0" encoding-"UTF-8" ?» 
<ServiceReguest> 
<filters> 
<Criteria field="tagName" operator="EQUALS">Cloud 
Agent</Criteria> 
</filters> 
</ServiceRequest> 


Response 


<?xml version="1.0" encoding="UTF-8" ?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/2. 
0/am/hostasset.xsd"» 

<responseCode>SUCCESS</responseCode> 

<count>3</count> 
</ServiceResponse> 


XSD 
<platform API server>/aps/xsd/2.0/am/hostasset.xsd 
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Get manifest version for an agent 
/aps/rest/2.0/search/am/hostasset 


[POST] 


Sample - Get manifest version for an agent 


API request 
curl -u "username:password" -X "POST" -H "Content-Type: text/xml" -H 
"Cache-Control: no-cache" --data-binary @agent manifest.xml 


"https://qualysapi.qualys.com/qps/rest/2.0/search/am/hostasset/?fields 
-id,agentInfo.manifestVersion.vm,agentInfo.manifestVersion.pc" 


Contents of agent manifest.xml 


<?xml version="1.0" encoding-" UTF-8" ?> 
<ServiceReguest> 
<preferences> 
<limitResults>1</limitResults> 
</preferences > 
<filters> 
<Criteria field="tagName" operator="EQUALS">Cloud Agent</Criteria> 
«Criteria field-"updated" operator="GREATER">2018-09- 
09T02:28:13Z«/Criteria» 
</filters> 
</ServiceReguest> 


Response 


<?xml version="1.0" encoding-" UTF-8"?» 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance” 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/2. 
0/am/hostasset.xsd"» 
<responseCode>SUCCESS</responseCode> 
<count>1</count> 
<hasMoreRecords>true</hasMoreRecords > 
<lastId>124450795</lastId> 
<data> 
<HostAsset> 
<id>124450795</id> 
<agentInfo> 
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Common Use Cases 

<manifestVersion> 
«vm»VULNSIGS-VMPC-2.4.301-2«/vm» 
«pc»VULNSIGS-VMPC-2.4.301-2«/pc» 

«/manifestVersion» 

«/agentInfo» 
</HostAsset> 
</data> 


XSD 


<platform API server>/aps/xsd/2.0/am/hostasset.xsd 
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Get all agents not checked-in in last N days 
/aps/rest/2.0/search/am/hostasset/ 


[POST] 


Sample - Get all agents not checked-in in last N days 


API request 
curl -u "USERNAME:PASSWORD" -X "POST" -H "Content-Type: text/xml" -H 
"Cache-Control: no-cache" --data-binary @list_agents_not_checkedin.xml 


"https://qualysapi.qualys.com/qps/rest/2.0/search/am/hostasset/" 


Contents of list agents not checkedin.xml 


<?xml version="1.0" encoding-" UTF-8" ?> 
<ServiceReguest> 
<filters> 
<Criteria field="tagName" operator="EQUALS">Cloud 
Agent</Criteria> 
«Criteria field-"updated" operator="LESSER">2018-08- 
25T00:00:01Z«/Criteria» 
«/filters» 
«/ServiceRequest» 


Response 


<?xml version="1.0" encoding-" UTF-8"?» 
«ServiceResponse xmlns:xsi-"http://www.w3.0rg/2001/XMLSchema- instance" 
xsi:noNamespaceSchemaLocation-"https://qualysapi.qualys.com/qps/xsd/2. 
0/am/asset.xsd"» 
«responseCode»SUCCESS«/responseCode» 
<count>3</count> 
<data> 
<Asset> 
<id>712038</id> 
<name>192.168.1.12</name> 
<created>2016-06-18T16:54:50Z</created> 
<modified>2016-06-18T16:54:51Z</modified> 
<type>HOST</type> 
<tags> 
<list> 
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Common Use Cases 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
</list> 
</tags> 
<sourceInfo> 
<list> 
<AssetSource/> 
«MISC 
«/sourceInfo» 
</Asset> 
<Asset> 
<id>2532638</id> 
«name»10.40.2.176«/name» 
<created>2017-04-17T13:32:48Z</created> 
<modified>2017-05-14T14:06:03Z</modified> 
<type>HOST</type> 
<tags> 
i SE > 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
</list> 
</tags> 
<sourceInfo> 
east 
<AssetSource/> 
</list> 
</sourceInfo> 
</Asset> 
<Asset> 
<id>2532838</id> 
<name>local IP agent</name> 
<created>2016-04-19T13:52:08Z</created> 
<modified>2017-02-05T12:26:48Z</modified> 


<type>HOST</type> 
<tags> 
<list> 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
<TagSimple> 
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Common Use Cases 
<14>217325°/1d> 
<name>Agent</name> 

</TagSimple> 
LHS E 
</tags> 
<sourceInfo> 
<list> 
<AssetSource/> 
<j list> 
</sourceInfo> 
</Asset> 
</data> 
</ServiceResponse> 


XSD 


<platform API server>/aps/xsd/2.0/am/asset.xsd 


126 


Qualys Cloud Agent API 
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Uninstall agents not checked-in in last N days 
/aps/rest/2.0/uninstall/am/asset/ 


[POST] 


Sample - Uninstall agents not checked-in in last N days 


API request 
curl -u "USERNAME:PASSWORD" -X "POST" -H "Content-Type: text/xml" -H 
"Cache-Control: no-cache" --data-binary 


@uninstall_agents_not_checkedin.xml 
"https://qualysapi.qualys.com/qps/rest/2.0/uninstall/am/asset/" 


Contents of uninstall agents not checkedin.xml 


<?xml version="1.0" encoding-"UTF-8" ?» 
<ServiceReguest> 
<filters> 
<Criteria field="tagName" operator="EQUALS">Cloud 
Agent</Criteria> 
<Criteria field="updated" operator="LESSER">2018-08- 
25T00:00:01Z</Criteria> 
</filters> 
</ServiceReguest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/2. 
0/am/asset.xsd"» 
<responseCode>SUCCESS</responseCode> 
<count>3</count> 
<data> 
<Asset> 
<id>712038</id> 
<name>192.168.1.12</name> 
«created»2016-06-18T16:54:50Z«/created» 
<modified>2016-06-18T16:54:51Z</modified> 
<type>HOST</type> 
<tags> 
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<list> 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
SE 
</tags> 
<sourceInfo> 
<A Se 
<AssetSource/> 
</list> 
</sourceInfo> 
</Asset> 
<Asset> 
<id>2532638</id> 
<name>10.40.2.176</name> 
<created>2017-04-17T13:32:48Z</created> 
<modified>2017-05-14T14:06:03Z</modified> 
<type>HOST</type> 
<tags> 
<list> 
<TagSimple> 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
LHS E 
</tags> 
<sourceInfo> 
<li> 
<AssetSource/> 
</list> 
</sourceInfo> 
</Asset> 
<Asset> 
<id>2532838</id> 
<name>local IP agent</name> 
<created>2016-04-19T13:52:08Z</created> 
<modified>2017-02-05T12:26:48Z</modified> 
<type>HOST</type> 
<tags> 
«ust 
«TagSimple» 
<id>509525</id> 
<name>Cloud Agent</name> 
</TagSimple> 
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Common Use Cases 
<TagSimple> 
<1d>217325</1d> 
<name>Agent</name> 
</TagSimple> 
</list> 
</tags> 
<sourceInfo> 
<list> 
<AssetSource/> 
lk ES 
</sourceInfo> 
</Asset> 
</data> 
</ServiceResponse> 


XSD 


<platform API server>/aps/xsd/2.0/am/asset.xsd 
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Common Use Cases 


Activate all agents for VM with tag XX 
/aps/rest/2.0/activate/am/asset 


[POST] 


Sample - Activate all agents for VM with tag XX 


API request 
curl -u "USERNAME:PASSWORD" -X "POST" -H "Content-Type: text/xml" -H 
"Cache-Control: no-cache" --data-binary @activate agents with tag.xml 


"https://qualysapi.qualys.com/qps/rest/2.0/activate/am/asset?module-AG 
ENT VM" 


Contents of activate agents with tag.xml 


<?xml version="1.0" encoding-"UTF-8" ?> 

<ServiceReguest> 

<filters> 

«Criteria field-"tagName" operator="EQUALS">xx</Criteria> 
«Criteria field-"tagName" operator-"EQUALS"»Cloud Agent«/Criteria» 
</filters> 

</ServiceReguest> 


Response 


<?xml version="1.0" encoding-"UTF-8"?» 
<ServiceResponse xmlns:xsi="http://ww.w3.org/2001/XMLSchema-instance” 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/2. 
8/am/asset.xsd" > 
<responseCode>SUCCESS</responseCode> 
<count>4</count> 
<data> 
<Asset> 
<id>1516574</id> 
<name>win pm 48</name> 
<created>2018-10-29T08:50:30Z</created> 
<modified>2018-10-29T10:17:30Z</modified> 
<type>HOST</type> 
<tags> 
<list> 
<TagSimple> 
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<id>8145136</id> 
<name>xx< /name> 
</TagSimple> 
<TagSimple> 
<id>8144814</id> 
<name>Cloud Agent</name> 
</TagSimple> 
</Listo 
</tags> 
</Asset> 
<Asset> 
<id>1516575</id> 


<name>win pm 8</name> 
<created>2018-10-29T08:50:32Z</created> 
<modified>2018-10-29T10:17:25Z</modified> 
<type>HOST</type> 
<tags> 
<list> 
<TagSimple> 
<id>8144814</id> 
<name>Cloud Agent</name> 
</TagSimple> 
<TagSimple> 
<id>8145136</id> 
<name>xx< /name> 
</TagSimple> 
< List 
</tags> 
</Asset> 
<Asset> 
<id>1516576</id> 
«name»win pm 50«/name» 
<created>2018-10-29T08:50:33Z</created> 
<modified>2018-10-29T10:17:16Z</modified> 
<type>HOST</type> 
<tags> 
OSE 
<TagSimple> 
<id>8145136</id> 
<name>xx< /name> 
</TagSimple> 
<TagSimple> 
<id>8144814</id> 
<name>Cloud Agent</name> 
</TagSimple> 
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emet 
«/tags» 
</Asset> 
<Asset> 
<id>1516577</id> 
<name>win pm 32</name> 
<created>2018-10-29T08:50:34Z</created> 
<modified>2018-10-29T10:17:20Z</modified> 


<type>HOST</type> 
<tags> 
Clist> 
<TagSimple> 
<id>8144814</id> 
<name>Cloud Agent</name> 
</TagSimple> 
<TagSimple> 
<id>8145136</id> 
<name>xx</name> 
</TagSimple> 
</Tist> 
</tags> 
</Asset> 
</data> 
</ServiceResponse> 
XSD 


<platform API server>/aps/xsd/2.0/am/asset.xsd 
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Mark an activation key as disabled 
/aps/rest/1.0/update/ca/agentactkey 


[POST] 


Sample - Mark an activation key as disabled 


API request 


curl -X POST -H "X-Requested-With: curl" -H "Authorization: Basic 
AbcdAbcdAbcdAbcdAbcd" -H "Content-Type: text/xml" -H "Cache-Control: 
no-cache" --data-binary @disable key.xml 
"https://qualysapi.qualys.com/qps/rest/1.0/update/ca/agentactkey" 


Contents of disable key.xml 


<?xml version="1.0" encoding-"UTF-8"?» 
<ServiceReguest> 
<data> 
<AgentActKey> 
<id>25002</id> 
<title>disabled from API</title> 
<status>ACTIVE</status> 
<countPurchased>10</countPurchased> 
<expireDate>2017-12-05T23:05:42Z</expireDate> 
<datePurchased>2016-10-05T23:05:42Z</datePurchased> 
<type>COUNT LIMITED</type> 
<isDisabled>true</isDisabled> 
</AgentActKey> 
</data> 
</ServiceRequest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://ww.w3.org/2001/XMLSchema-instance” 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/1. 
0/ca/agentactkey.xsd"» 

«responseCode»SUCCESS«/responseCode» 

<count>1</count> 

<data> 

<AgentActKey> 
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<id>25002</id> 
<activationKey>dc5e51f9-89de-47e2-ad35- 

26d5ee0f865d</activationKey> 
<status>ACTIVE</status> 
<countPurchased>10</countPurchased> 
<countUsed>0</countUsed> 
<datePurchased>2015-10-05T23:05:42Z</datePurchased> 
<type>COUNT LIMITED</type> 
<title>disabled from API</title> 
<isDisabled>true</isDisabled> 
<modules> 
<list> 
<ActivationKeyModule> 
«license»VM LICENSE</license> 
</ActivationKeyModule> 
€ Mist 
</modules> 
<tags> 
SE 
</tags> 
<agents> 
SE 
</agents> 
</AgentActKey> 
</data> 
</ServiceResponse> 


XSD 


«platform API server>/qps/xsd/1.0/ca/agentactkey.xsd 
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Search for all activation keys that are disabled 
/aps/rest/1.0/search/ca/agentactkey/ 


[POST] 


Sample - Search for all activation keys that are disabled 


API reguest 


curl -u fo username:password -X POST -H "X-Reguested-With: curl“ -H 
"Content-Type: text/xml" -H "Cache-Control: no-cache" --data-binary 
@list disabled keys.xml 
"https://qualysapi.qualys.com/qps/rest/1.0/search/ca/agentactkey/" 


Contents of list disabled keys.xml 


<?xml version="1.0" encoding-" UTF-8" ?> 
<ServiceReguest> 
<filters> 
«Criteria field="isDisabled“ operator="EOUALS" >true</Criteria> 
</filters> 
</ServiceReguest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
xsi:noNamespaceSchemaLocation="https://qualysapi.qualys.com/qps/xsd/1. 
0/ca/agentactkey.xsd"» 
<responseCode>SUCCESS</responseCode> 
<count>1</count> 
<hasMoreRecords>false</hasMoreRecords> 
<data> 
<AgentActKey> 
<id>25002</id> 
<activationKey>dc5e51f9-89de-47e2-ad35- 
26d5ee0f865d</activationKey> 
<status>ACTIVE</status> 
<countPurchased>18</countPurchased> 
<countUsed>0</countUsed> 
<datePurchased>2017-10-05T23:05:42Z</datePurchased> 
<type>COUNT LIMITED</type> 
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Common Use Cases 
<title>disabled from API</title> 
<isDisabled>true</isDisabled> 
<modules> 

<list> 
<ActivationKeyModule> 
«license»VM LICENSE</license> 
</ActivationKeyModule> 
«Lust» 
«/modules» 
«tags» 
<list/> 
</tags> 
<agents> 
<list/> 
</agents> 
</AgentActKey> 
</data> 
</ServiceResponse> 


XSD 


<platform API server>/qps/xsd/1.0/ca/agentactkey.xsd 
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Get all agents for an activation key 
/aps/rest/1.0/search/ca/agentactkey/ 


[POST] 


Sample - Get all agents for an activation key 


API reguest 


curl -u fo username:password -X POST -H "X-Reguested-With: curl" -H 
"Content-Type: text/xml" -H "Cache-Control: no-cache" --data-binary 
@list agents with key.xml 
"https://qualysapi.qualys.com/qps/rest/1.0/search/ca/agentactkey/" 


Contents of list agents with key.xml 


<?xml version="1.0" encoding-"UTF-8" ?> 
<ServiceReguest> 
<filters> 
«Criteria field-"activationKey" operator="EQUALS">b9f9ccab- 
bc82-43a0-8bba-7e9913d1e386«/Criteria» 
«/filters» 
</ServiceReguest> 


Response 


<?xml version="1.0" encoding="UTF-8"?> 
<ServiceResponse xmlns:xsi="http://www.w3.org/2081/XMLSchema-instance”" 
xsi:noNamespaceSchemalocation="https://gualysapi.gualys.com/gps/xsd/1. 
0/ca/agentactkey.xsd"» 
«responseCode»SUCCESS«/responseCode» 
<count>1</count> 
<hasMoreRecords>false</hasMoreRecords> 
<data> 
<AgentActKey> 
<id>6201</id> 
«activationKey»b9f9cca0-bc82-43a0-8bba- 
7e9913d1e386«/activationKey» 
<status>INACTIVE</status> 
<countPurchased>18</countPurchased> 
<countUsed>2</countUsed> 
<datePurchased>2016-03-05T12:48:54Z</datePurchased> 
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Common Use Cases 
<type>UNLIMITED</type> 
<title>example key updated from api</title> 
<isDisabled>false</isDisabled> 
<modules> 
const 
</modules> 
<tags> 
€ list 
</tags> 
<agents> 
d LL E 
<AgentAsset> 
<id>710625</id> 
«uuid»b0e9cca0-bc82-43a0-8bba- 
7e9913d1e386«/uuid» 
«name»10.10.10.10«/name» 
</AgentAsset> 
<AgentAsset> 
<id>703719</id> 
«uuid»bif9cca0-bc82-43a0-8bba- 
7e9913d1e386«/uuid» 
«name»192.168.1.1«/name» 
«/AgentAsset» 
est 
«/agents» 
</AgentActKey> 
</data> 
</ServiceResponse> 


XSD 


«platform API server>/qps/xsd/1.0/ca/agentactkey.xsd 
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